Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-48779 (GCVE-0-2026-48779)
Vulnerability from cvelistv5 – Published: 2026-06-16 21:26 – Updated: 2026-08-04 12:07
VLAI
EPSS
VEX
Title
ws: Memory exhaustion DoS from tiny fragments and data chunks
Summary
ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.
Severity
7.5 (High)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
24 references
Impacted products
121 products
| Vendor | Product | Version | |
|---|---|---|---|
| websockets | ws |
Affected:
>= 1.1.0, < 5.2.5
Affected: >= 6.0.0, < 6.2.4 Affected: >= 7.0.0, < 7.5.11 Affected: >= 8.0.0, < 8.21.0 |
|
| Red Hat | Cryostat 4 on RHEL 9 |
Unaffected:
4.2.0-13 , < *
(rpm)
cpe:/a:redhat:cryostat:4::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782840519 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839981 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839193 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782838753 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839279 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782840539 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782841925 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782844225 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839658 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782838476 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839996 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839494 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Red Hat Developer Hub 1.10 |
Unaffected:
1783448184 , < *
(rpm)
cpe:/a:redhat:rhdh:1.10::el9 |
|
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1782761244 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
|
| Red Hat | Red Hat Discovery 2 |
Unaffected:
1782166952 , < *
(rpm)
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783690532 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676191 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783929816 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784094353 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784093953 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784094943 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676585 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676649 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676675 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784094299 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784094725 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676820 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676883 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676894 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784095175 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676977 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784093503 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783677297 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783677345 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783677533 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684360 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684068 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784054582 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784054606 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784055295 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684603 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684668 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684667 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784054873 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684707 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784055589 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684779 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684831 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684839 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784055533 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784055558 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784056134 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783685128 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783685129 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783685375 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667125 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783666755 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784054598 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055387 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055726 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667517 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667577 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667611 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055020 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667641 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055586 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667790 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667859 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667875 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667869 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667877 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055576 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055244 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055382 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783668266 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783668288 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783669219 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 |
Unaffected:
1782498475 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.29::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 |
Unaffected:
1782498792 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.29::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1781937133 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1782287580 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782201894 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782201833 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782201696 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782201537 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782201851 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782201812 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782231869 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782201466 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783327185 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
|
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4 |
|
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3 |
|
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0 |
|
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed |
|
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1 |
|
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3 |
|
| Red Hat | Red Hat AMQ Broker 7 |
cpe:/a:redhat:amq_broker:7 |
|
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2 |
|
| Red Hat | Red Hat build of Apache Camel for Spring Boot 4 |
cpe:/a:redhat:camel_spring_boot:4 |
|
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 |
cpe:/a:redhat:apache_camel_hawtio:4 |
|
| Red Hat | Red Hat Build of Keycloak |
cpe:/a:redhat:build_keycloak: |
|
| Red Hat | Red Hat Build of Podman Desktop |
cpe:/a:redhat:podman_desktop:1 |
|
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview |
cpe:/a:redhat:podman_desktop:0 |
|
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1 |
|
| Red Hat | Red Hat Data Grid 8 |
cpe:/a:redhat:jboss_data_grid:8 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3 |
|
| Red Hat | Red Hat Fuse 7 |
cpe:/a:redhat:jboss_fuse:7 |
|
| Red Hat | Red Hat Hardened Images |
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 |
cpe:/a:redhat:jboss_enterprise_application_platform:8 |
|
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack |
cpe:/a:redhat:jbosseapxp |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4 |
|
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3 |
|
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6 |
|
| Red Hat | Self-service automation portal 2 |
cpe:/a:redhat:ansible_portal:2 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-48779",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-17T18:07:28.748295Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-17T18:12:48.129Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-openshift-console-plugin-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.2.0-13",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782840519",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839981",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839193",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782838753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839279",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782840539",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782841925",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782844225",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839658",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782838476",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839996",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839494",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783448184",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782761244",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782166952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-ui-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783690532",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676191",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783929816",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094353",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784093953",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094943",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676649",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676675",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094299",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094725",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676820",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676883",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784095175",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676977",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784093503",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677297",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677345",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677533",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684360",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684068",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054582",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054606",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055295",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684603",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684668",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684667",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054873",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684707",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684779",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684831",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684839",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055533",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055558",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784056134",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685128",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685129",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685375",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667125",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783666755",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054598",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055387",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055726",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667517",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667577",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667611",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055020",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667641",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055586",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667790",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667859",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667875",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667869",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667877",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055576",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055244",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055382",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783668266",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783668288",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783669219",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.29::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/code-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.29",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782498475",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.29::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/dashboard-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.29",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782498792",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781937133",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782287580",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201833",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201696",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201537",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201851",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782231869",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201466",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-search-ui-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783327185",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "cryostat-openshift-console-plugin-npm",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "grafana-infinity-datasource-npm",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "ws",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "unaffected",
"packageName": "gatekeeper/gatekeeper-rhel9",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-must-gather-rhel9",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-operator-bundle",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel9-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-419-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-pf5-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-operator-bundle",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9-operator",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_broker:7"
],
"defaultStatus": "affected",
"packageName": "ws",
"product": "Red Hat AMQ Broker 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-24/lightspeed-rhel8",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-25/lightspeed-rhel8",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-26/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/lightspeed-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-27/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-27/lightspeed-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "automation-controller",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-eda-controller",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:camel_spring_boot:4"
],
"defaultStatus": "unaffected",
"packageName": "ws",
"product": "Red Hat build of Apache Camel for Spring Boot 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4"
],
"defaultStatus": "affected",
"packageName": "ws",
"product": "Red Hat build of Apache Camel - HawtIO 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:build_keycloak:"
],
"defaultStatus": "unaffected",
"packageName": "ws",
"product": "Red Hat Build of Keycloak",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:1"
],
"defaultStatus": "affected",
"packageName": "rh-podman-desktop.git",
"product": "Red Hat Build of Podman Desktop",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-bootc-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-rhel-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-sandbox-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/rhcl-console-plugin-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"defaultStatus": "unaffected",
"packageName": "ws",
"product": "Red Hat Data Grid 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "dotnet9.0",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "rust",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "dotnet5.0-build-reference-packages",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "dotnet9.0",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "mozjs60",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "rust",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "ceph",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "dotnet9.0",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "gjs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "rust",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-gaudi-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/disk-image-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rust",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "thrift",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "affected",
"packageName": "ws",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "dotnet10.0",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "dotnet8.0",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "dotnet9.0",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "ruff",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "rust",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "yarnpkg",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8"
],
"defaultStatus": "unaffected",
"packageName": "ws",
"product": "Red Hat JBoss Enterprise Application Platform 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"defaultStatus": "unaffected",
"packageName": "ws",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-dashboard-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-console-plugin",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vulnerability-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-portal",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
}
],
"datePublic": "2026-06-16T21:26:22.537Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1050",
"description": "Excessive Platform Resource Consumption within a Loop",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-04T12:07:12.477Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"name": "RHBZ#2489661",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
},
{
"lang": "en",
"value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
},
{
"lang": "en",
"value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:29197: Red Hat Discovery 2"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
},
{
"lang": "en",
"value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-16T22:01:24.571Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-16T21:26:22.537Z",
"value": "Made public."
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "ws",
"vendor": "websockets",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.1.0, \u003c 5.2.5"
},
{
"status": "affected",
"version": "\u003e= 6.0.0, \u003c 6.2.4"
},
{
"status": "affected",
"version": "\u003e= 7.0.0, \u003c 7.5.11"
},
{
"status": "affected",
"version": "\u003e= 8.0.0, \u003c 8.21.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400: Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "CWE-770: Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-16T21:26:22.537Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
},
{
"name": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"name": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"name": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"name": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
}
],
"source": {
"advisory": "GHSA-96hv-2xvq-fx4p",
"discovery": "UNKNOWN"
},
"title": "ws: Memory exhaustion DoS from tiny fragments and data chunks"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-48779",
"datePublished": "2026-06-16T21:26:22.537Z",
"dateReserved": "2026-05-22T20:18:20.365Z",
"dateUpdated": "2026-08-04T12:07:12.477Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-48779",
"date": "2026-08-10",
"epss": "0.00782",
"percentile": "0.52591"
},
"microsoft_vex": {
"current_release_date": "2026-07-03T01:10:13.000Z",
"cve": "CVE-2026-48779",
"id": "msrc_CVE-2026-48779",
"initial_release_date": "2026-06-02T00:00:00.000Z",
"product_status:known_not_affected": "1",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "ws: Memory exhaustion DoS from tiny fragments and data chunks",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-48779.json",
"version": "2"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-48779\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-06-17T13:20:42.887\",\"lastModified\":\"2026-08-03T13:18:43.067\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"websockets\",\"product\":\"ws\",\"versions\":[{\"version\":\"\u003e= 1.1.0, \u003c 5.2.5\",\"status\":\"affected\"},{\"version\":\"\u003e= 6.0.0, \u003c 6.2.4\",\"status\":\"affected\"},{\"version\":\"\u003e= 7.0.0, \u003c 7.5.11\",\"status\":\"affected\"},{\"version\":\"\u003e= 8.0.0, \u003c 8.21.0\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-openshift-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.2.0-13\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782840519\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839981\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839193\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782838753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839279\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782840539\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782841925\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782844225\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839658\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/monitoring-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782838476\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839996\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839494\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.10::el9\"],\"versions\":[{\"version\":\"1783448184\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1782761244\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"discovery/discovery-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"],\"versions\":[{\"version\":\"1782166952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783690532\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676191\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783929816\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784094353\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784093953\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784094943\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676649\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676675\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784094299\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784094725\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676820\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676883\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784095175\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676977\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784093503\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783677297\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783677345\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783677533\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684360\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684068\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784054582\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784054606\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784055295\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684603\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684668\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684667\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784054873\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684707\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784055589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684779\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684831\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684839\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784055533\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784055558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784056134\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783685128\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783685129\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783685375\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667125\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783666755\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784054598\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055387\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055726\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667517\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667577\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667611\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055020\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667641\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055586\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667790\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667859\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667875\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667869\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667877\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055576\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055244\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055382\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783668266\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783668288\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783669219\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.29\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/code-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"],\"versions\":[{\"version\":\"1782498475\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.29\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"],\"versions\":[{\"version\":\"1782498792\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1781937133\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1782287580\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782201894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782201833\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782201696\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782201537\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782201851\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782201812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782231869\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782201466\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-search-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783327185\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat-openshift-console-plugin-npm\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-infinity-datasource-npm\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-419-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Broker 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:amq_broker:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-24/lightspeed-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-25/lightspeed-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/lightspeed-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-27/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-27/lightspeed-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-controller\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-eda-controller\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel for Spring Boot 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:camel_spring_boot:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel - HawtIO 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:apache_camel_hawtio:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Keycloak\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:build_keycloak:\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-podman-desktop.git\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-bootc-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-rhel-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-sandbox-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/rhcl-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Data Grid 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:jboss_data_grid:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rust\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet5.0-build-reference-packages\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mozjs60\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rust\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ceph\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gjs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rust\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-gaudi-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/disk-image-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rust\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thrift\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet10.0\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ruff\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rust\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yarnpkg\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:jbosseapxp\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-automl-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-autorag-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-console\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-vulnerability-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/automation-portal\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/bootc-automation-portal-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-17T18:07:28.748295Z\",\"id\":\"CVE-2026-48779\",\"options\":[{\"exploitation\":\"poc\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"},{\"lang\":\"en\",\"value\":\"CWE-770\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1050\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ws_project:ws:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"1.1.0\",\"versionEndExcluding\":\"5.2.5\",\"matchCriteriaId\":\"0996A87C-D0FF-4A0D-946F-172476CE8742\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ws_project:ws:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndExcluding\":\"6.2.4\",\"matchCriteriaId\":\"DE37962C-D077-4D0E-A9C4-4E6F6C62F80F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ws_project:ws:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.5.11\",\"matchCriteriaId\":\"6220326D-EDFB-451F-AE2F-303CDA363061\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ws_project:ws:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"8.0.0\",\"versionEndExcluding\":\"8.21.0\",\"matchCriteriaId\":\"1EE3B45F-FC9D-485E-9731-AC93F3730B40\"}]}]}],\"references\":[{\"url\":\"https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Exploit\",\"Mitigation\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29197\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33155\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33160\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33163\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33173\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33183\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33574\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34342\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36754\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36820\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37272\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40984\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41941\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41944\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:48151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-48779\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2489661\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Exploit\",\"Mitigation\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-04T04:16:23+00:00",
"cve": "CVE-2026-48779",
"id": "CVE-2026-48779",
"initial_release_date": "2026-06-16T21:26:22.537000+00:00",
"product_status:fixed": "338",
"product_status:known_affected": "49",
"product_status:known_not_affected": "366",
"product_status:under_investigation": "30",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.2.0-13\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-openshift-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782840519\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839981\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839193\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782838753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839279\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782840539\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782841925\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782844225\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839658\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782838476\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/monitoring-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839996\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839494\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783448184\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782761244\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782166952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783690532\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-ui-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676191\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783929816\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784094353\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784093953\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784094943\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676585\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676649\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676675\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784094299\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784094725\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676820\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676883\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676894\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784095175\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676977\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784093503\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783677297\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783677345\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783677533\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684360\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684068\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784054582\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784054606\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055295\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684603\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684668\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684667\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784054873\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684707\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684779\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684831\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684839\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055533\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055558\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784056134\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783685128\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783685129\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783685375\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667125\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783666755\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784054598\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055387\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055726\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667517\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667577\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667611\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055020\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667641\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055586\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667790\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667859\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667875\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667869\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667877\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055576\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055244\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055382\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783668266\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783668288\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783669219\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.29\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782498475\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/code-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.29\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782498792\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/dashboard-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781937133\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782287580\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201894\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201833\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201696\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201537\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201851\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782231869\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201466\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783327185\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-search-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat-openshift-console-plugin-npm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"grafana-infinity-datasource-npm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-419-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_broker:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Broker 7\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-24/lightspeed-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-25/lightspeed-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/lightspeed-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-27/gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-27/lightspeed-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-controller\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-eda-controller\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:camel_spring_boot:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel for Spring Boot 4\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:apache_camel_hawtio:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel - HawtIO 4\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:build_keycloak:\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Keycloak\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop\", \"packageName\": \"rh-podman-desktop.git\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-bootc-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-rhel-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-sandbox-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/rhcl-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_data_grid:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Data Grid 8\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rust\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"dotnet5.0-build-reference-packages\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"mozjs60\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"rust\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ceph\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gjs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rust\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-gaudi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-rocm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/disk-image-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rust\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"thrift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"dotnet10.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"ruff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"rust\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"yarnpkg\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jbosseapxp\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-automl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-autorag-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-console\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-vulnerability-frontend-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/automation-portal\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/bootc-automation-portal-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-06-16T22:01:24.571Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-16T21:26:22.537Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:48151: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34342: Cluster Observability Operator 1.5.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36754: Red Hat Developer Hub 1.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33574: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29197: Red Hat Discovery 2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-16T21:26:22.537Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-48779\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2489661\", \"name\": \"RHBZ#2489661\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:48151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34342\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36754\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33574\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29197\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36820\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33155\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33160\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33163\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33173\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33183\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41941\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41944\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40984\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37272\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1050\", \"description\": \"Excessive Platform Resource Consumption within a Loop\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-03T12:05:49.378Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-48779\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-17T18:07:28.748295Z\"}}}], \"references\": [{\"url\": \"https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-17T18:07:47.408Z\"}}], \"cna\": {\"title\": \"ws: Memory exhaustion DoS from tiny fragments and data chunks\", \"source\": {\"advisory\": \"GHSA-96hv-2xvq-fx4p\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"websockets\", \"product\": \"ws\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 1.1.0, \u003c 5.2.5\"}, {\"status\": \"affected\", \"version\": \"\u003e= 6.0.0, \u003c 6.2.4\"}, {\"status\": \"affected\", \"version\": \"\u003e= 7.0.0, \u003c 7.5.11\"}, {\"status\": \"affected\", \"version\": \"\u003e= 8.0.0, \u003c 8.21.0\"}]}], \"references\": [{\"url\": \"https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p\", \"name\": \"https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7\", \"name\": \"https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53\", \"name\": \"https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94\", \"name\": \"https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8\", \"name\": \"https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-400\", \"description\": \"CWE-400: Uncontrolled Resource Consumption\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-770\", \"description\": \"CWE-770: Allocation of Resources Without Limits or Throttling\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-06-16T21:26:22.537Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-48779\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-03T12:05:49.378Z\", \"dateReserved\": \"2026-05-22T20:18:20.365Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-06-16T21:26:22.537Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:36820
Vulnerability from csaf_redhat - Published: 2026-07-08 17:12 - Updated: 2026-08-10 14:57Summary
Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.29.0 Release.
Severity
Important
Notes
Topic: Red Hat OpenShift Dev Spaces 3.29.0 has been released.
Details: Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development.
The 3.29 release is based on Eclipse Che 7.119 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2.
Users still using the v1 standard should migrate as soon as possible.
https://devfile.io/docs/2.2.0/migrating-to-devfile-v2
Dev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates.
https://access.redhat.com/support/policy/updates/openshift#crw
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js's default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.
7.4 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Markdown content in JavaDoc hovers, allowing a malicious Java file to include hidden commands. If a user clicks a specially crafted link within a JavaDoc hover popup, an attacker can execute arbitrary VS Code commands, which can lead to full system compromise in trusted workspaces.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected behavior or potential bypass of security controls on the proxy server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Threats
Impact
Important
A flaw was found in Netty. Netty's DNS (Domain Name System) codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the encoder through user-influenced hostnames, leading to a high integrity impact on the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty's HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both `Transfer-Encoding: chunked` and `Content-Length` headers. While Netty correctly strips the conflicting `Content-Length` header for HTTP/1.1 messages, this guard is absent for HTTP/1.0. This can lead to HTTP request smuggling, where downstream proxies or handlers may misinterpret message boundaries, potentially allowing an attacker to bypass security controls or access unauthorized information.
7.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted LZ4 compressed data stream. This can cause the Lz4FrameDecoder to allocate a large amount of memory (up to 32 MB per block) before the LZ4 decompression runs, leading to excessive memory consumption and a denial of service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker could exploit this vulnerability by sending a specific sequence of HTTP responses (103, followed by a 200 with a GET body, then another 200 for a HEAD request) when the client pipelines GET then HEAD requests. This can cause the HttpClientCodec to incorrectly pair responses, leading to subsequent HTTP responses being parsed from the wrong offset. This issue may result in information disclosure or other data integrity problems due to misinterpretation of network traffic.
7.3 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Threats
Impact
Important
A flaw was found in Netty. A remote attacker can bypass the configured decompression limit in the HttpContentDecompressor by sending a specially crafted compressed payload using Brotli (br), Zstandard (zstd), or Snappy content encodings. This can lead to unbounded memory allocation, resulting in an out-of-memory Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Traefik. A low-privileged tenant with HTTPRoute creation permissions in Traefik's Kubernetes Gateway API provider can bypass security settings. This allows the tenant to expose the REST provider handler and gain live dynamic configuration write access to Traefik. This vulnerability enables unauthorized reconfiguration of routers and services, potentially leading to privilege escalation within the system.
8.3 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenTelemetry Java, specifically within the baggage propagation implementation of opentelemetry-api and opentelemetry-extension-trace-propagators. A remote attacker can exploit this vulnerability by sending oversized baggage, which leads to unbounded memory allocation and high CPU consumption. This can result in a Denial of Service (DoS) for the affected service. Furthermore, because baggage is automatically re-injected into outgoing requests, the impact can spread to other downstream services.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Vendor Fix
fix
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Quarkus. A remote attacker could bypass HTTP path-based authorization policies by using specially crafted encoded semicolons, slashes, or backslashes in HTTP requests. This could allow unauthorized access to protected static resources, leading to information disclosure.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 | — |
Workaround
|
Threats
Impact
Important
References
214 references
Acknowledgments
byte256
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Dev Spaces 3.29.0 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development.\nThe 3.29 release is based on Eclipse Che 7.119 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2.\nUsers still using the v1 standard should migrate as soon as possible.\nhttps://devfile.io/docs/2.2.0/migrating-to-devfile-v2\nDev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates.\nhttps://access.redhat.com/support/policy/updates/openshift#crw",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36820",
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.29/html/administration_guide/installing-devspaces",
"url": "https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.29/html/administration_guide/installing-devspaces"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12151",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12856",
"url": "https://access.redhat.com/security/cve/CVE-2026-12856"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42578",
"url": "https://access.redhat.com/security/cve/CVE-2026-42578"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42579",
"url": "https://access.redhat.com/security/cve/CVE-2026-42579"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42581",
"url": "https://access.redhat.com/security/cve/CVE-2026-42581"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42583",
"url": "https://access.redhat.com/security/cve/CVE-2026-42583"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42584",
"url": "https://access.redhat.com/security/cve/CVE-2026-42584"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42587",
"url": "https://access.redhat.com/security/cve/CVE-2026-42587"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44249",
"url": "https://access.redhat.com/security/cve/CVE-2026-44249"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44774",
"url": "https://access.redhat.com/security/cve/CVE-2026-44774"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44893",
"url": "https://access.redhat.com/security/cve/CVE-2026-44893"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45292",
"url": "https://access.redhat.com/security/cve/CVE-2026-45292"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48043",
"url": "https://access.redhat.com/security/cve/CVE-2026-48043"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48059",
"url": "https://access.redhat.com/security/cve/CVE-2026-48059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50559",
"url": "https://access.redhat.com/security/cve/CVE-2026-50559"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6734",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9697",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36820.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.29.0 Release.",
"tracking": {
"current_release_date": "2026-08-10T14:57:50+00:00",
"generator": {
"date": "2026-08-10T14:57:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:36820",
"initial_release_date": "2026-07-08T17:12:17+00:00",
"revision_history": [
{
"date": "2026-07-08T17:12:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T14:57:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Dev Spaces 3.29",
"product": {
"name": "Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_devspaces:3.29::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Dev Spaces"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3A7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/code-rhel9\u0026tag=1782498475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3A8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/code-sshd-rhel9\u0026tag=1782497670"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3Ab5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/configbump-rhel9\u0026tag=1782403514"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/dashboard-rhel9\u0026tag=1782498792"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3A077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/imagepuller-rhel9\u0026tag=1782403262"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9\u0026tag=1783093088"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9\u0026tag=1782989027"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"product": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"product_id": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/oauth2-proxy-rhel9\u0026tag=1782487406"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3Ac05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/openvsx-rhel9\u0026tag=1783007534"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3A091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator\u0026tag=1782403611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"product_id": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-operator-bundle@sha256%3A6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/devspaces-operator-bundle\u0026tag=1783094587"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3Afdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9\u0026tag=1782989367"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3Afcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/server-rhel9\u0026tag=1783033397"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3A11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/traefik-rhel9\u0026tag=1782403274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/udi-rhel9\u0026tag=1782991491"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3Ad0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel10\u0026tag=1782987430"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3A06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel9\u0026tag=1782987705"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3A844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/code-rhel9\u0026tag=1782498475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3Ae8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/code-sshd-rhel9\u0026tag=1782497670"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3A45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/configbump-rhel9\u0026tag=1782403514"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/dashboard-rhel9\u0026tag=1782498792"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3A8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/imagepuller-rhel9\u0026tag=1782403262"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3Aaa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9\u0026tag=1783093088"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9\u0026tag=1782989027"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"product": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"product_id": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/oauth2-proxy-rhel9\u0026tag=1782487406"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3A8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/openvsx-rhel9\u0026tag=1783007534"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3A5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator\u0026tag=1782403611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3A2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9\u0026tag=1782989367"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3Aa107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/server-rhel9\u0026tag=1783033397"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3A4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/traefik-rhel9\u0026tag=1782403274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/udi-rhel9\u0026tag=1782991491"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3Ae99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel10\u0026tag=1782987430"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3Ad086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel9\u0026tag=1782987705"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3Ae1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/code-rhel9\u0026tag=1782498475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3A926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/code-sshd-rhel9\u0026tag=1782497670"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3A768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/configbump-rhel9\u0026tag=1782403514"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/dashboard-rhel9\u0026tag=1782498792"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3A66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/imagepuller-rhel9\u0026tag=1782403262"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3Abf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9\u0026tag=1783093088"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3Ad55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9\u0026tag=1782989027"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"product_id": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/oauth2-proxy-rhel9\u0026tag=1782487406"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3A981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/openvsx-rhel9\u0026tag=1783007534"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3A89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator\u0026tag=1782403611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3A81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9\u0026tag=1782989367"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3Ae21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/server-rhel9\u0026tag=1783033397"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3A6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/traefik-rhel9\u0026tag=1782403274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/udi-rhel9\u0026tag=1782991491"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3A72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel10\u0026tag=1782987430"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3Aacd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel9\u0026tag=1782987705"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3A1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/code-rhel9\u0026tag=1782498475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3Af2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/code-sshd-rhel9\u0026tag=1782497670"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3A6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/configbump-rhel9\u0026tag=1782403514"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/dashboard-rhel9\u0026tag=1782498792"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3Ab0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/imagepuller-rhel9\u0026tag=1782403262"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9\u0026tag=1783093088"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9\u0026tag=1782989027"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"product": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"product_id": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/oauth2-proxy-rhel9\u0026tag=1782487406"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3Aaf3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/openvsx-rhel9\u0026tag=1783007534"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3A0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator\u0026tag=1782403611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3A2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9\u0026tag=1782989367"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3A856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/server-rhel9\u0026tag=1783033397"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3Ac18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/traefik-rhel9\u0026tag=1782403274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3Af0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/udi-rhel9\u0026tag=1782991491"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3A33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel10\u0026tag=1782987430"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3A25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel9\u0026tag=1782987705"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x"
},
"product_reference": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64"
},
"product_reference": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64"
},
"product_reference": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29",
"product_id": "Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.29"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6734",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"discovery_date": "2026-06-17T19:04:00.272340+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490024"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important security flaw. The `undici` library, when configured with `Socks5ProxyAgent` to handle requests for multiple origins, incorrectly reuses connection pools. This can lead to sensitive data and credentials being misrouted to unintended destinations, potentially downgrading HTTPS connections to HTTP and compromising data integrity and confidentiality. Red Hat products utilizing `undici` with `Socks5ProxyAgent` in multi-origin scenarios are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "RHBZ#2490024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6734"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj"
}
],
"release_date": "2026-06-17T16:36:55.439000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "The single most impactful mitigation is applying network egress controls to restrict which external destinations affected applications can reach. Because the vulnerability causes requests to be misrouted to wrong origins, limiting the set of reachable origins directly reduces the attack surface. These controls collectively limit the blast radius of the connection pool misrouting \u2014 the attacker must compromise one of the explicitly allowed destinations rather than any arbitrary origin \u2014 but they do not fix the underlying logic bug.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing"
},
{
"cve": "CVE-2026-9697",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-06-17T19:03:30.813843+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490018"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When undici\u0027s ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js\u0027s default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. Applications using `undici`\u0027s `ProxyAgent` with a SOCKS5 proxy URI will silently ignore user-configured TLS options, including custom Certificate Authorities. This bypasses intended security controls for HTTPS communication, enabling a remote attacker to perform Man-in-the-Middle attacks, potentially leading to information disclosure or arbitrary code execution in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "RHBZ#2490018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9697"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g"
}
],
"release_date": "2026-06-17T16:46:42.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy"
},
{
"cve": "CVE-2026-12151",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-17T17:01:45.297604+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the `undici` WebSocket client allows a remote attacker to cause unbounded memory growth. By sending numerous small or empty WebSocket frames, an unauthenticated attacker can exhaust system memory, leading to a denial of service in Red Hat products that use the affected client.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "RHBZ#2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q"
}
],
"release_date": "2026-06-17T16:05:38.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames"
},
{
"acknowledgments": [
{
"names": [
"byte256"
]
}
],
"cve": "CVE-2026-12856",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-06-20T17:33:27+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491278"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Markdown content in JavaDoc hovers, allowing a malicious Java file to include hidden commands. If a user clicks a specially crafted link within a JavaDoc hover popup, an attacker can execute arbitrary VS Code commands, which can lead to full system compromise in trusted workspaces.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vscode-java: vscode: Command Injection vulnerability in the JavaDoc hover provider of the vscode-java extension",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important, given that it requires a user to open a malicious Java source file and interact with a hover popup. Successful exploitation allows an attacker to execute arbitrary commands within the context of the VS Code editor and potentially the underlying operating system. The vulnerability\u0027s root cause is the over-trusting of Markdown content returned by the Java language server, which fails to isolate extension-generated trusted links from attacker-controlled JavaDoc content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12856"
},
{
"category": "external",
"summary": "RHBZ#2491278",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491278"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12856",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12856"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/vscode-java/security/advisories/GHSA-7qv8-6qrw-3crv",
"url": "https://github.com/redhat-developer/vscode-java/security/advisories/GHSA-7qv8-6qrw-3crv"
}
],
"release_date": "2026-06-29T12:25:07.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid opening or interacting with untrusted Java projects or files within Red Hat OpenShift Dev Spaces. Exercise caution and refrain from clicking on unfamiliar links presented in JavaDoc hover popups, particularly when working with code from unverified sources. Disabling the `vscode-java` extension when not actively engaged in Java development can further reduce exposure, though this will impact Java-related functionality.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vscode-java: vscode: Command Injection vulnerability in the JavaDoc hover provider of the vscode-java extension"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-42578",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-05-13T19:02:00.826936+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477226"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected behavior or potential bypass of security controls on the proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42578"
},
{
"category": "external",
"summary": "RHBZ#2477226",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477226"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42578",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42578"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42578",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42578"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr",
"url": "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr"
}
],
"release_date": "2026-05-13T17:57:43.538000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation"
},
{
"cve": "CVE-2026-42579",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-05-13T19:01:25.062732+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477217"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. Netty\u0027s DNS (Domain Name System) codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the encoder through user-influenced hostnames, leading to a high integrity impact on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important integrity flaw in Netty\u0027s DNS codec. The vulnerability arises from insufficient enforcement of RFC 1035 domain name constraints during both encoding and decoding, allowing remote attackers to manipulate DNS responses or user-controlled hostnames. This could lead to a high integrity impact on affected Red Hat products that utilize the vulnerable Netty DNS codec.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42579"
},
{
"category": "external",
"summary": "RHBZ#2477217",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477217"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42579"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42579",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42579"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm",
"url": "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm"
}
],
"release_date": "2026-05-13T18:01:52.500000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement"
},
{
"cve": "CVE-2026-42581",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-05-13T19:02:26.404511+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477232"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both `Transfer-Encoding: chunked` and `Content-Length` headers. While Netty correctly strips the conflicting `Content-Length` header for HTTP/1.1 messages, this guard is absent for HTTP/1.0. This can lead to HTTP request smuggling, where downstream proxies or handlers may misinterpret message boundaries, potentially allowing an attacker to bypass security controls or access unauthorized information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. Netty\u0027s HttpObjectDecoder, used across various Red Hat products, improperly handles conflicting `Transfer-Encoding: chunked` and `Content-Length` headers in HTTP/1.0 requests. This allows a remote attacker to perform HTTP request smuggling, potentially bypassing security controls or gaining unauthorized access to information due to misinterpretation of message boundaries by downstream proxies or handlers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42581"
},
{
"category": "external",
"summary": "RHBZ#2477232",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477232"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42581"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9",
"url": "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9"
}
],
"release_date": "2026-05-13T17:54:44.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure any reverse proxies or load balancers in front of Netty to either reject HTTP/1.0 requests containing both Transfer-Encoding: chunked and Content-Length headers, or to explicitly prioritize the Transfer-Encoding header over Content-Length for HTTP/1.0 traffic. This ensures consistent interpretation of message boundaries and prevents request smuggling attacks.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers"
},
{
"cve": "CVE-2026-42583",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T19:01:32.498598+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477219"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted LZ4 compressed data stream. This can cause the Lz4FrameDecoder to allocate a large amount of memory (up to 32 MB per block) before the LZ4 decompression runs, leading to excessive memory consumption and a denial of service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Netty\u0027s LZ4FrameDecoder. The decoder allocates a buffer based on the decompressed length from the LZ4 frame header (up to 32 MB per block) before decompression runs. A remote attacker can send a small crafted LZ4 header (as few as 22 bytes) to force excessive memory allocation, leading to a denial of service. Red Hat products that use Netty with LZ4 compression enabled are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42583"
},
{
"category": "external",
"summary": "RHBZ#2477219",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477219"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42583",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42583"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42583",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42583"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6",
"url": "https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6"
}
],
"release_date": "2026-05-13T18:09:19.817000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder"
},
{
"cve": "CVE-2026-42584",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-05-13T19:01:51.846351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477224"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker could exploit this vulnerability by sending a specific sequence of HTTP responses (103, followed by a 200 with a GET body, then another 200 for a HEAD request) when the client pipelines GET then HEAD requests. This can cause the HttpClientCodec to incorrectly pair responses, leading to subsequent HTTP responses being parsed from the wrong offset. This issue may result in information disclosure or other data integrity problems due to misinterpretation of network traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in Netty\u0027s HttpClientCodec allows a remote attacker to cause data confusion. By sending a specially crafted sequence of HTTP responses, an attacker can cause subsequent HTTP responses to be parsed incorrectly, potentially leading to information disclosure or data integrity issues in applications utilizing Netty for HTTP client operations. This vulnerability affects various Red Hat products that bundle Netty, including Red Hat AMQ, Enterprise Application Platform, Red Hat Build of Quarkus, and Red Hat Build of Keycloak.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42584"
},
{
"category": "external",
"summary": "RHBZ#2477224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477224"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42584",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42584"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42584",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42584"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3",
"url": "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3"
}
],
"release_date": "2026-05-13T18:10:48.437000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion"
},
{
"cve": "CVE-2026-42587",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T19:01:35.415881+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477220"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. A remote attacker can bypass the configured decompression limit in the HttpContentDecompressor by sending a specially crafted compressed payload using Brotli (br), Zstandard (zstd), or Snappy content encodings. This can lead to unbounded memory allocation, resulting in an out-of-memory Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Netty\u0027s HTTP content decompression. A remote attacker can exploit this flaw by sending specially crafted compressed payloads using Brotli, Zstandard, or Snappy encodings, bypassing configured decompression limits. This leads to unbounded memory allocation, potentially causing an out-of-memory condition and rendering affected Red Hat systems unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42587"
},
{
"category": "external",
"summary": "RHBZ#2477220",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477220"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42587",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42587"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42587",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42587"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv"
}
],
"release_date": "2026-05-13T18:22:21.699000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression"
},
{
"cve": "CVE-2026-44249",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-06-11T22:02:05.327173+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in netty-handler is rated as Important because a remote attacker can bypass configured IPv6 subnet filtering rules. This flaw, stemming from an incorrect masking operation, could allow unauthorized access to or exposure of services that are intended to be network-restricted within Red Hat products utilizing the affected Netty component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44249"
},
{
"category": "external",
"summary": "RHBZ#2488081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44249",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44249"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86",
"url": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86"
}
],
"release_date": "2026-06-11T20:46:14.110000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44774",
"cwe": {
"id": "CWE-15",
"name": "External Control of System or Configuration Setting"
},
"discovery_date": "2026-05-15T17:01:12.579630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik. A low-privileged tenant with HTTPRoute creation permissions in Traefik\u0027s Kubernetes Gateway API provider can bypass security settings. This allows the tenant to expose the REST provider handler and gain live dynamic configuration write access to Traefik. This vulnerability enables unauthorized reconfiguration of routers and services, potentially leading to privilege escalation within the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "traefik: Traefik: Privilege escalation via Kubernetes Gateway API provider configuration bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44774"
},
{
"category": "external",
"summary": "RHBZ#2477937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44774",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44774"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44774",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44774"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v2.11.46",
"url": "https://github.com/traefik/traefik/releases/tag/v2.11.46"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.6.17",
"url": "https://github.com/traefik/traefik/releases/tag/v3.6.17"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.7.1",
"url": "https://github.com/traefik/traefik/releases/tag/v3.7.1"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-96qj-4jj5-wcjc",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-96qj-4jj5-wcjc"
}
],
"release_date": "2026-05-15T16:30:43.265000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Upgrade Traefik to version 2.11.46 or later (2.x line), 3.6.17 or later (3.6.x line), or 3.7.1 or later (3.7.x line) by installing updated Red Hat OpenShift Dev Spaces releases that ship a fixed traefik-rhel9 container image.\n\nUntil updated images are available, limit which principals can create HTTPRoute resources in namespaces where Traefik runs with the Kubernetes Gateway API provider. Disable or tightly restrict the Traefik REST dynamic configuration provider in shared Gateway deployments, and block untrusted use of TraefikService backends that reference @internal handlers.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "traefik: Traefik: Privilege escalation via Kubernetes Gateway API provider configuration bypass"
},
{
"cve": "CVE-2026-44893",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-06-12T15:01:18.066312+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488383"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important because a remote, unauthenticated attacker can trigger a denial of service in applications utilizing `netty-codec-haproxy`. By sending a specially crafted HAProxy message with a malformed SSL TLV header, an attacker can cause an `IndexOutOfBoundsException`, leading to unreleased memory and resource exhaustion. This can render the affected application unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44893"
},
{
"category": "external",
"summary": "RHBZ#2488383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44893"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44893",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44893"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv"
}
],
"release_date": "2026-06-12T14:00:25.801000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message"
},
{
"cve": "CVE-2026-45292",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-28T17:02:14.674828+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482785"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry Java, specifically within the baggage propagation implementation of opentelemetry-api and opentelemetry-extension-trace-propagators. A remote attacker can exploit this vulnerability by sending oversized baggage, which leads to unbounded memory allocation and high CPU consumption. This can result in a Denial of Service (DoS) for the affected service. Furthermore, because baggage is automatically re-injected into outgoing requests, the impact can spread to other downstream services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry Java\u0027s baggage propagation, affecting Red Hat products that use OpenTelemetry for telemetry. A remote attacker can exploit this by sending excessively large baggage, leading to uncontrolled memory and CPU usage. The vulnerability\u0027s impact can extend to downstream services due to automatic re-injection of baggage into outgoing requests.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45292"
},
{
"category": "external",
"summary": "RHBZ#2482785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482785"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45292"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45292",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45292"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-java/commit/03837d3c1763bc35464aea1078671e2ef2336a5f",
"url": "https://github.com/open-telemetry/opentelemetry-java/commit/03837d3c1763bc35464aea1078671e2ef2336a5f"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-java/pull/8380",
"url": "https://github.com/open-telemetry/opentelemetry-java/pull/8380"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.62.0",
"url": "https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.62.0"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-java/security/advisories/GHSA-rcgg-9c38-7xpx",
"url": "https://github.com/open-telemetry/opentelemetry-java/security/advisories/GHSA-rcgg-9c38-7xpx"
}
],
"release_date": "2026-05-28T16:37:29.490000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-48043",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-06-12T16:02:56.371830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488442"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in netty-codec-http2, affecting Red Hat products that utilize HTTP/2 communication with decompression. A remote attacker can exploit a resource leak in the `DelegatingDecompressorFrameListener` by sending malformed HTTP/2 frames, potentially leading to an Out Of Memory Error and causing the Java Virtual Machine to terminate. This could disrupt service availability in affected deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48043"
},
{
"category": "external",
"summary": "RHBZ#2488442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488442"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48043"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j",
"url": "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j"
}
],
"release_date": "2026-06-12T14:39:52.498000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak"
},
{
"cve": "CVE-2026-48059",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-06-12T16:02:40.032749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Netty HAProxy PROXY protocol v2 codec, which can lead to a denial of service. A remote attacker can trigger a memory leak by sending a specially crafted HAProxy PROXY protocol v2 header with deeply nested SSL TLV records, causing resource exhaustion in affected Red Hat products that utilize this codec.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48059"
},
{
"category": "external",
"summary": "RHBZ#2488437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48059"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j",
"url": "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j"
}
],
"release_date": "2026-06-12T14:42:44.677000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
},
{
"cve": "CVE-2026-50559",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-09T10:55:32.426000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486959"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Quarkus. A remote attacker could bypass HTTP path-based authorization policies by using specially crafted encoded semicolons, slashes, or backslashes in HTTP requests. This could allow unauthorized access to protected static resources, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Quarkus where HTTP path-based authorization policies can be bypassed by a remote attacker. Specially crafted HTTP requests containing encoded semicolons, slashes, or backslashes can circumvent security controls, allowing unauthorized access to protected static resources and leading to information disclosure. This is critical in deployments where Quarkus applications serve sensitive static content and rely solely on path-based authorization.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50559"
},
{
"category": "external",
"summary": "RHBZ#2486959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50559",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50559"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50559",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50559"
},
{
"category": "external",
"summary": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-qcxp-gm7m-4j5v",
"url": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-qcxp-gm7m-4j5v"
}
],
"release_date": "2026-06-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T17:12:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:1384e5ba2b7d23119a49d8713826f4c65668bca310589ac7abd0c0d41c7e4c90_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:7f58528b1da9146aa55917324fdf2b375794742b34e5d10ff57f713af60746cd_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:844c3b1499b00aeadfc561642e53792ad80f535efd53b35793ba08b0f26c6d61_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-rhel9@sha256:e1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8c9a7ebf430b9f4ca200c6c70b049e8456cf88fd8bf0871b42d65e8dc786d451_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:926d965e6fd12ec0d758270fb4c90bbdc1a05e60cc4c895cf9b671a296c9d867_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:e8e807451e3c5d8d0a8575e1280d7125a4ece51547a7b4a5cd247837662cedad_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:45cc0d783d1e7874ac73dfbdfe7e03c63b227ab3c4f1e15a0a2f5c97956a76d9_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:6f3eb26734e89375c3e1fb7ac366e12dc0d41bac8f07de9210c7e9845a01eec1_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:768c45fa9f35d98dfe5cfe1ea12f552402bf68ac6e1f828b14310ef59ce57c40_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/configbump-rhel9@sha256:b5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:137ffbb95d463d95da6c350600d968f3cd0e9873bf2e7c6edf952ae3229e9e2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cccdfd7e90877c27c6d8caea4f1e8ad89bb97c83d97ddf570d4f4ee116f1986_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:71657b82894cfd9e350746f48965e148868a675b9a20dcb7f94a6bc7a5b16ea5_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/dashboard-rhel9@sha256:881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:091529a93e258a612fd4a98222e6a370ee10b4e97efa791b50f79a2670163d01_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0e8958a22f6771ddfe32b34027c69dbbef65d980c7e465a79d4202d2627994ad_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5a8b0203ff083113e8b30a123ab30c4bad571f57fb59c1e7e01807b92552504e_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:077cc953354ea2edd85569a622f97c15d44163d68234e7a9fdee899d25c19cdb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:66285f866090e1bfbedacd592e9d5ea9f2a30b88aa03bc86bc790d6b98a929a4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:8c80054171d5063457df4bd074674b1824783a101dacb6137da227080aff957c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:62476ac2fb0096caa9b181f523cc3573ccffe70be1433f08d1d0255b6d3a0640_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:6f632bc9829880a44e2e94084284b52683b4a01dc3315043b0aa32eb344b16cb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:aa3d1cf7853bfe8307efb01f714585f378d1d3d4ed5de7c8808a72e4aeecd4f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:bf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5909184fe3d37eb45ba3bf55d7b708d818f2a5abfc2949c4a7081a5cd30cea4f_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6217f0bb4937fa0e0fc0a5c86456fdc1992e169dfedc3d11d5165cef575d4d53_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:0f8e1171f278395f3c72e4d9d3c0492bed15b678963fb2b6182bd65343b85a2e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:823bb59b1c7d01557c29f9f1e4a4ee39814c38d826b06c3c9de4b8d179078419_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:93c7e9b321c7e9aa4a412a993a6b20412e24772832cc0dd23bbb17aa25f15487_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:8f145d4e336bd77fcc94f0845f9ebf94563ffd96d56794d96a665c11241df152_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:981917806c7faf31156241cc85577cf375ee566f78adaeadc096d0ba8482b835_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af3ed91687500d64e2348cca4877c43f73211b8fbd132e7767c3521763185348_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2af86b409540513f6da1afa83110a5cafe8778d2ec16332faa31c964bd5f43f7_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:2f3bec76a833a72c7dfa93ed55e55e80e2621c154e5a2f156deaf78d7c6b97b4_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:81a2385be30079500f13f97a18607aa685abd61265bf8fa78bc6ce126341be50_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:856b9088dbda4e7374daf232602f4bb90b05ad1be1df46d6e363a002f549f4de_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:a107ae2f7b140f2fb2243f33c378228c2f164cfd2d23f57e63f6c424fd400929_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:e21de356b7d879800a96f6c5aeee6bc59a3ed9c58d36503f7089625ce887bb25_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/server-rhel9@sha256:fcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:11f005939e15d63057bf2f0a988b6baebc275d3e752e9f7696d0f7f5266fd5d6_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:4b4c98be96a932d508fad769eff61bff2a44e13baa60b22b6c543f4a11eb71c2_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:6c87453ffe89e8be752ee40c8a9ccf6894c83be703f13901b1e8b64a4c0e549a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/traefik-rhel9@sha256:c18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:33367b9fdb3addce3302ad35bc10423505fefe3dd27b8b9013b26d66caac2a6c_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:72cbdb061cbcd295be5e66a0eabb409af16ade7f0aa12b04c2d7327e9e1a24ba_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:d0379f9da8cbb5514394a4550ff0d79f90fa691fcced5806296479c7b63353da_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06285611aef2528fc92c5cebb66ff4c74fe44d457f43cf9ec2f4a98c3c68d25e_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:25e0f4153eb5bc6fbc6b389d5adc81bfde103070ef58317c3c25ce4144a628d3_arm64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:acd3c0369c18cbfa63a5972ed1721f93f1fcb456963ff855dea2c295baf1cdb8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:07d89c1b524d1451051feb865bc716da2197add90fa0c58c4cf4a82975ec846c_s390x",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:6582e647d7dd604e25977ec1579969aa1fcb29ead1a0ea65833531d633bbdd2b_amd64",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:75e3aec03dffbd0f40f88a08ff5e0319f4515d73f0bcfae28b5fa526b494afc4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.29:registry.redhat.io/devspaces/udi-rhel9@sha256:f0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters"
}
]
}
RHSA-2026:37272
Vulnerability from csaf_redhat - Published: 2026-07-09 11:43 - Updated: 2026-08-10 14:57Summary
Red Hat Security Advisory: RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release
Severity
Important
Notes
Topic: The 1.4.2 release of Red Hat Trusted Artifact Signer OpenShift Operator.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20, 4.21, 4.22
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in image-size. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying specially crafted JXL, HEIF, or JP2 image files that contain zero-sized boxes. The `findBox` function, responsible for image validation, enters an infinite loop when processing these malicious files, leading to an application hang. This can disrupt the availability of services relying on the image-size component.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Vendor Fix
fix
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Threats
Impact
Important
A flaw was found in devalue, a JavaScript library used for serializing values. Due to quirks in some JavaScript engines, the `devalue.parse` function could be exploited by a remote attacker when deserializing specially crafted sparse arrays. This could lead to excessive memory consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Threats
Impact
Important
A flaw was found in Next.js. Applications utilizing the Pages Router with internationalization (i18n) configured and middleware or proxy-based authorization are susceptible to unauthorized access. A remote attacker can exploit this by making locale-less /_next/data/<buildId>/<page>.json requests, which bypass the intended authorization checks. This allows the attacker to retrieve sensitive server-side rendered (SSR) JSON data from protected pages, leading to information disclosure.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. This vulnerability allows an attacker to bypass security checks in web applications that use Next.js middleware to protect specific web pages. By sending specially crafted web addresses, an attacker can access protected content without proper authorization. This could lead to unauthorized viewing of sensitive information or access to restricted features.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. App Router applications that use middleware or proxy-based authorization checks are vulnerable to unauthorized access. A remote attacker can exploit this by crafting specific .rsc and segment-prefetch URLs, which bypass the intended middleware rules. This allows access to protected content without proper authorization.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. When self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. A remote attacker could exploit this by requesting large local assets from the /_next/image endpoint. This can lead to out-of-memory conditions, resulting in a Denial of Service (DoS) for the application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. Self-hosted applications utilizing the built-in Node.js server are vulnerable to Server-Side Request Forgery (SSRF) through specially crafted WebSocket upgrade requests. A remote attacker can exploit this by causing the server to proxy requests to arbitrary internal or external destinations. This could lead to the exposure of internal services or sensitive cloud metadata endpoints.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A remote attacker can send crafted POST requests to a server action, triggering a request-body handling deadlock. This leaves connections open, consuming server resources and ultimately leading to a Denial of Service (DoS) for legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. A remote unauthenticated attacker could exploit a bypass in a security fix when using middleware.ts with Turbopack. This vulnerability could lead to the disclosure of sensitive information.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
References
124 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.2 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20, 4.21, 4.22",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:37272",
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-71319",
"url": "https://access.redhat.com/security/cve/CVE-2025-71319"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42570",
"url": "https://access.redhat.com/security/cve/CVE-2026-42570"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44573",
"url": "https://access.redhat.com/security/cve/CVE-2026-44573"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44574",
"url": "https://access.redhat.com/security/cve/CVE-2026-44574"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44575",
"url": "https://access.redhat.com/security/cve/CVE-2026-44575"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44577",
"url": "https://access.redhat.com/security/cve/CVE-2026-44577"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44578",
"url": "https://access.redhat.com/security/cve/CVE-2026-44578"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44579",
"url": "https://access.redhat.com/security/cve/CVE-2026-44579"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45109",
"url": "https://access.redhat.com/security/cve/CVE-2026-45109"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37272.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release",
"tracking": {
"current_release_date": "2026-08-10T14:57:53+00:00",
"generator": {
"date": "2026-08-10T14:57:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:37272",
"initial_release_date": "2026-07-09T11:43:10+00:00",
"revision_history": [
{
"date": "2026-07-09T11:43:10+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T14:57:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"product_id": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-backfill-redis-rhel9@sha256%3Ac34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rekor-backfill-redis-rhel9\u0026tag=1783332625"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"product": {
"name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"product_id": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/certificate-transparency-rhel9@sha256%3A428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/certificate-transparency-rhel9\u0026tag=1783326748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"product": {
"name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"product_id": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"product_identification_helper": {
"purl": "pkg:oci/trillian-database-rhel9@sha256%3Ab5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/trillian-database-rhel9\u0026tag=1783329793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"product": {
"name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"product_id": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"product_identification_helper": {
"purl": "pkg:oci/fulcio-rhel9@sha256%3A9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/fulcio-rhel9\u0026tag=1783326847"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"product": {
"name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"product_id": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/trillian-logserver-rhel9@sha256%3A6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/trillian-logserver-rhel9\u0026tag=1783329793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"product": {
"name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"product_id": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/trillian-logsigner-rhel9@sha256%3A613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/trillian-logsigner-rhel9\u0026tag=1783329793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
"product": {
"name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
"product_id": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/trillian-redis-rhel9@sha256%3Afd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/trillian-redis-rhel9\u0026tag=1783329793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"product_id": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-search-ui-rhel9@sha256%3Ac0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rekor-search-ui-rhel9\u0026tag=1783327185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"product_id": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-server-rhel9@sha256%3A938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rekor-server-rhel9\u0026tag=1783332625"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"product": {
"name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"product_id": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/timestamp-authority-rhel9@sha256%3A5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/timestamp-authority-rhel9\u0026tag=1783326690"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64"
},
"product_reference": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64"
},
"product_reference": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
},
"product_reference": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64"
},
"product_reference": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64"
},
"product_reference": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64"
},
"product_reference": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
},
"product_reference": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-71319",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-06-09T21:01:11.339286+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487296"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in image-size. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying specially crafted JXL, HEIF, or JP2 image files that contain zero-sized boxes. The `findBox` function, responsible for image validation, enters an infinite loop when processing these malicious files, leading to an application hang. This can disrupt the availability of services relying on the image-size component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `image-size` component, which can be triggered remotely by processing specially crafted JXL, HEIF, or JP2 image files containing zero-sized boxes. This flaw can lead to an application hang due to an infinite loop in the `findBox` function, impacting the availability of services that rely on this image processing library within Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-71319"
},
{
"category": "external",
"summary": "RHBZ#2487296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-71319",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-71319"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-71319",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-71319"
},
{
"category": "external",
"summary": "https://github.com/image-size/image-size/security/advisories/GHSA-m5qc-5hw7-8vg7",
"url": "https://github.com/image-size/image-size/security/advisories/GHSA-m5qc-5hw7-8vg7"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/image-size-denial-of-service-via-infinite-loop-in-findbox-function",
"url": "https://www.vulncheck.com/advisories/image-size-denial-of-service-via-infinite-loop-in-findbox-function"
}
],
"release_date": "2026-06-09T19:57:16.125000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images."
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42570",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T17:01:16.012124+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487050"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in devalue, a JavaScript library used for serializing values. Due to quirks in some JavaScript engines, the `devalue.parse` function could be exploited by a remote attacker when deserializing specially crafted sparse arrays. This could lead to excessive memory consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "devalue: devalue: Excessive memory consumption via deserialization of sparse arrays",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42570"
},
{
"category": "external",
"summary": "RHBZ#2487050",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487050"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42570",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42570"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42570",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42570"
},
{
"category": "external",
"summary": "https://github.com/sveltejs/devalue/commit/206ca6712fbc380a4571c59de9ab04b91110792d",
"url": "https://github.com/sveltejs/devalue/commit/206ca6712fbc380a4571c59de9ab04b91110792d"
},
{
"category": "external",
"summary": "https://github.com/sveltejs/devalue/releases/tag/v5.8.1",
"url": "https://github.com/sveltejs/devalue/releases/tag/v5.8.1"
},
{
"category": "external",
"summary": "https://github.com/sveltejs/devalue/security/advisories/GHSA-77vg-94rm-hx3p",
"url": "https://github.com/sveltejs/devalue/security/advisories/GHSA-77vg-94rm-hx3p"
}
],
"release_date": "2026-06-09T16:12:26.377000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "devalue: devalue: Excessive memory consumption via deserialization of sparse arrays"
},
{
"cve": "CVE-2026-44573",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-13T18:01:50.343509+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477199"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. Applications utilizing the Pages Router with internationalization (i18n) configured and middleware or proxy-based authorization are susceptible to unauthorized access. A remote attacker can exploit this by making locale-less /_next/data/\u003cbuildId\u003e/\u003cpage\u003e.json requests, which bypass the intended authorization checks. This allows the attacker to retrieve sensitive server-side rendered (SSR) JSON data from protected pages, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in Next.js applications allows unauthorized access to sensitive server-side rendered (SSR) JSON data by bypassing middleware authorization checks. This occurs when applications use the Pages Router with internationalization (i18n) and middleware or proxy-based authorization, enabling remote attackers to retrieve protected page data through locale-less requests.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44573"
},
{
"category": "external",
"summary": "RHBZ#2477199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477199"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44573",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44573"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44573",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44573"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5"
}
],
"release_date": "2026-05-13T16:48:16.218000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n"
},
{
"cve": "CVE-2026-44574",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-13T18:02:21.088167+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. This vulnerability allows an attacker to bypass security checks in web applications that use Next.js middleware to protect specific web pages. By sending specially crafted web addresses, an attacker can access protected content without proper authorization. This could lead to unauthorized viewing of sensitive information or access to restricted features.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Next.js: Next.js: Authorization bypass via crafted query parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important authorization bypass flaw in Next.js applications, which are utilized in Red Hat AMQ, Red Hat Trusted Artifact Signer, and Red Hat Enterprise Linux AI. The vulnerability arises when applications use Next.js middleware to protect dynamic routes, allowing attackers to access restricted content by manipulating query parameters. This bypass occurs because specially crafted parameters can alter the route value seen by the page while the visible path remains unchanged, circumventing intended security controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44574"
},
{
"category": "external",
"summary": "RHBZ#2477207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44574",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44574"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44574",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44574"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv"
}
],
"release_date": "2026-05-13T16:56:06.008000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Next.js: Next.js: Authorization bypass via crafted query parameters"
},
{
"cve": "CVE-2026-44575",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-13T18:01:17.168356+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477188"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. App Router applications that use middleware or proxy-based authorization checks are vulnerable to unauthorized access. A remote attacker can exploit this by crafting specific .rsc and segment-prefetch URLs, which bypass the intended middleware rules. This allows access to protected content without proper authorization.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Unauthorized access to protected content via middleware bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Next.js App Router applications that utilize middleware or proxy-based authorization. A remote attacker can bypass these security checks by crafting specific URLs, leading to unauthorized access to protected content. This is due to transport-specific route variants used for segment prefetching not being consistently matched by middleware rules.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44575"
},
{
"category": "external",
"summary": "RHBZ#2477188",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477188"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44575",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44575"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f"
}
],
"release_date": "2026-05-13T16:54:39.455000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Unauthorized access to protected content via middleware bypass"
},
{
"cve": "CVE-2026-44577",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T18:01:35.713847+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477194"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. When self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. A remote attacker could exploit this by requesting large local assets from the /_next/image endpoint. This can lead to out-of-memory conditions, resulting in a Denial of Service (DoS) for the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Next.js: Next.js: Denial of Service via Image Optimization API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Next.js affects self-hosted applications utilizing the default image loader. A remote attacker can trigger a denial of service by requesting large local image assets, leading to out-of-memory conditions. This vulnerability is present when `images.localPatterns` is configured to allow all patterns by default, and is not applicable when using Vercel, a custom image loader, or `images.unoptimized: true`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44577"
},
{
"category": "external",
"summary": "RHBZ#2477194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44577",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44577"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh"
}
],
"release_date": "2026-05-13T17:00:02.786000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Next.js: Next.js: Denial of Service via Image Optimization API"
},
{
"cve": "CVE-2026-44578",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-05-13T18:01:13.729805+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477187"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. Self-hosted applications utilizing the built-in Node.js server are vulnerable to Server-Side Request Forgery (SSRF) through specially crafted WebSocket upgrade requests. A remote attacker can exploit this by causing the server to proxy requests to arbitrary internal or external destinations. This could lead to the exposure of internal services or sensitive cloud metadata endpoints.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important severity flaw in Next.js affects self-hosted applications, including Red Hat AMQ, when using the built-in Node.js server. A remote attacker can exploit specially crafted WebSocket upgrade requests to perform Server-Side Request Forgery, potentially exposing internal network services or sensitive cloud metadata endpoints. This risk is specific to deployments where the origin server is directly exposed to untrusted networks.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44578"
},
{
"category": "external",
"summary": "RHBZ#2477187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477187"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44578",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44578"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44578",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44578"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r"
}
],
"release_date": "2026-05-13T17:01:38.942000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests"
},
{
"cve": "CVE-2026-44579",
"cwe": {
"id": "CWE-833",
"name": "Deadlock"
},
"discovery_date": "2026-05-13T18:01:32.406247+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477193"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A remote attacker can send crafted POST requests to a server action, triggering a request-body handling deadlock. This leaves connections open, consuming server resources and ultimately leading to a Denial of Service (DoS) for legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Denial of Service via crafted POST requests to server actions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important as Next.js applications configured with Partial Prerendering and Cache Components are susceptible to a remote denial of service. An unauthenticated attacker can exhaust server connections by sending specially crafted POST requests, leading to a complete disruption of service for legitimate users. This impact is significant due to the potential for widespread unavailability of affected web applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44579"
},
{
"category": "external",
"summary": "RHBZ#2477193",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477193"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44579"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44579",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44579"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx"
}
],
"release_date": "2026-05-13T17:04:28.388000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Denial of Service via crafted POST requests to server actions"
},
{
"cve": "CVE-2026-45109",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-13T18:01:23.402405+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477190"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. A remote unauthenticated attacker could exploit a bypass in a security fix when using middleware.ts with Turbopack. This vulnerability could lead to the disclosure of sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Next.js allows a remote unauthenticated attacker to bypass a prior security fix when applications utilize `middleware.ts` with Turbopack. This bypass undermines intended access controls, potentially leading to the exposure of sensitive information in affected Red Hat AMQ and Red Hat Trusted Artifact Signer deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45109"
},
{
"category": "external",
"summary": "RHBZ#2477190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477190"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45109",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45109"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45109",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45109"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6"
}
],
"release_date": "2026-05-13T17:11:07.275000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:40984
Vulnerability from csaf_redhat - Published: 2026-07-16 11:26 - Updated: 2026-08-10 19:00Summary
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update
Severity
Important
Notes
Topic: Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update
Details: Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update
FIXED BUGS:
==========
DFBUGS-7340: RHODF 4.20.15 release
DFBUGS-7331: [Backport for 4.20] - [GSS][ODF][MCG] noobaa-db-pg-cluster won't synchronize anymore - "could not receive data from WAL stream: ERROR: requested WAL segment 00000008000001C600000068 has already been removed"
DFBUGS-6939: [4.20.z] Integrate ibm-storage-odf-operator 1.9.0
DFBUGS-6666: [Backport to odf-4.20.z] Remove duplicate PersistentVolumeUsageCritical alerts
DFBUGS-6528: [Backport to 4.20.z] maintenance mode is always set for storageclients in non RDR clusters
DFBUGS-6522: CLONE 4.20 - [UI] Resource profile calculations doesn't include NFS
DFBUGS-5418: [Backport to odf-4.20.z]Local Storage Operator not installed install link broken in OCP 4.20
DFBUGS-4843: [Backport to odf-4.20.z] [RDR] Failover for an RBD appset workload remains stuck, workload pods don't restore
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Moderate
An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to HTTP(S) URLs outside the allow-list. This is a policy/allow-list bypass that enables build-time SSRF behavior (requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion in build outputs (redirected content is treated as module source and bundled).
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Low
An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled).
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Low
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw has been discovered in the fast-xml-parser npm library. In fast-xml-parser, a RangeError vulnerability exists in the numeric entity processing of fast-xml-parser when parsing XML with out-of-range entity code points (e.g., `�` or `�`). This causes the parser to throw an uncaught exception, crashing any application that processes untrusted XML input.
5.3 (Medium)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted XML input. The system incorrectly interprets a dot in a DOCTYPE entity name as a regular expression wildcard during processing. This allows the attacker to bypass security measures and inject malicious scripts, resulting in Cross-Site Scripting (XSS) when the parsed output is displayed to users.
7.1 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted, small XML input. This input can force the XML parser to perform an unlimited amount of entity expansion, consuming excessive resources. This can lead to the application freezing for an extended period, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.
6.5 (Medium)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Threats
Impact
Moderate
A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).
6.5 (Medium)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Threats
Impact
Moderate
A flaw was found in fast-xml-parser. A user can exploit this flaw by processing specially crafted XML data with the XML builder when the `preserveOrder` option is enabled. This can lead to a stack overflow, causing the application to crash and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.
8.3 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
References
164 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Data Foundation 4.20.15 security, enhancement \u0026 bug fix update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Data Foundation 4.20.15 security, enhancement \u0026 bug fix update\n\nFIXED BUGS:\n==========\nDFBUGS-7340: RHODF 4.20.15 release\nDFBUGS-7331: [Backport for 4.20] - [GSS][ODF][MCG] noobaa-db-pg-cluster won\u0027t synchronize anymore - \"could not receive data from WAL stream: ERROR: requested WAL segment 00000008000001C600000068 has already been removed\"\nDFBUGS-6939: [4.20.z] Integrate ibm-storage-odf-operator 1.9.0\nDFBUGS-6666: [Backport to odf-4.20.z] Remove duplicate PersistentVolumeUsageCritical alerts\nDFBUGS-6528: [Backport to 4.20.z] maintenance mode is always set for storageclients in non RDR clusters\nDFBUGS-6522: CLONE 4.20 - [UI] Resource profile calculations doesn\u0027t include NFS\nDFBUGS-5418: [Backport to odf-4.20.z]Local Storage Operator not installed install link broken in OCP 4.20\nDFBUGS-4843: [Backport to odf-4.20.z] [RDR] Failover for an RBD appset workload remains stuck, workload pods don\u0027t restore",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40984",
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68157",
"url": "https://access.redhat.com/security/cve/CVE-2025-68157"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68458",
"url": "https://access.redhat.com/security/cve/CVE-2025-68458"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25128",
"url": "https://access.redhat.com/security/cve/CVE-2026-25128"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25896",
"url": "https://access.redhat.com/security/cve/CVE-2026-25896"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26278",
"url": "https://access.redhat.com/security/cve/CVE-2026-26278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26996",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27904",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27942",
"url": "https://access.redhat.com/security/cve/CVE-2026-27942"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33036",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33815",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33816",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40984.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.15 security, enhancement \u0026 bug fix update",
"tracking": {
"current_release_date": "2026-08-10T19:00:32+00:00",
"generator": {
"date": "2026-08-10T19:00:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:40984",
"initial_release_date": "2026-07-16T11:26:54+00:00",
"revision_history": [
{
"date": "2026-07-16T11:26:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T19:00:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Openshift Data Foundation 4.2",
"product": {
"name": "Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Openshift Data Foundation"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3Affd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783667125"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783666755"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-operator-bundle@sha256%3A522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-operator-bundle\u0026tag=1784058684"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784055387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"product_id": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-operator-bundle@sha256%3Ae4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-operator-bundle\u0026tag=1784058849"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3Ae068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783667517"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-operator-bundle@sha256%3A55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-operator-bundle\u0026tag=1784059036"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783667577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3Ab0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783667611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"product_id": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-operator-bundle@sha256%3Ad24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-operator-bundle\u0026tag=1784059112"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784055020"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783667641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3Ac0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783667790"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783667859"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-operator-bundle@sha256%3A30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-operator-bundle\u0026tag=1784059342"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3Afbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783667875"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"product_id": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-dependencies-operator-bundle@sha256%3Ae5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-dependencies-operator-bundle\u0026tag=1784059433"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-rhel9-operator@sha256%3Ab7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator\u0026tag=1783667869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-operator-bundle@sha256%3Ad726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle\u0026tag=1784059499"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-sidecar-rhel9@sha256%3Abb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9\u0026tag=1783667877"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3A4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3Aaf14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055244"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-operator-bundle@sha256%3Ad3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-operator-bundle\u0026tag=1784059645"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3Abaf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784055382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Ad9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783668266"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"product_id": "registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-operator-bundle@sha256%3A73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-operator-bundle\u0026tag=1784060452"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"product_id": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-prometheus-operator-bundle@sha256%3A40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-prometheus-operator-bundle\u0026tag=1784059957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"product_id": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-cluster-operator-bundle@sha256%3Ab81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-cluster-operator-bundle\u0026tag=1784060765"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"product_id": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-hub-operator-bundle@sha256%3Ab454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-hub-operator-bundle\u0026tag=1784060213"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3Ae2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783668288"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"product_id": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-recipe-operator-bundle@sha256%3A2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-recipe-operator-bundle\u0026tag=1784059917"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29?arch=amd64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783669219"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"product_id": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-operator-bundle@sha256%3A06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657?arch=amd64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-operator-bundle\u0026tag=1784059800"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783667125"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783666755"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3Ab61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3Acf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784055387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3Aad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783667517"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783667577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3Aafa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783667611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784055020"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783667641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3Ad8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783667790"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783667859"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783667875"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-rhel9-operator@sha256%3A38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator\u0026tag=1783667869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-sidecar-rhel9@sha256%3A0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9\u0026tag=1783667877"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3Aca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055244"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784055382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Af7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783668266"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3Add062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783668288"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783669219"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3Ad1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c?arch=s390x\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783667125"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3Ad2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27?arch=s390x\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783666755"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894?arch=s390x\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62?arch=s390x\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784055387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783667517"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783667577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783667611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3Ae6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784055020"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783667641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3A762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783667790"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783667859"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3Aa742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783667875"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-rhel9-operator@sha256%3A9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator\u0026tag=1783667869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-sidecar-rhel9@sha256%3A601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9\u0026tag=1783667877"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3A5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3Ae402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055244"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784055382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3A5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783668266"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783668288"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff?arch=s390x\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783669219"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77?arch=arm64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783667125"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6?arch=arm64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783666755"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3Aca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e?arch=arm64\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89?arch=arm64\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784055387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783667517"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3Add5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783667577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783667611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784055020"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783667641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3A5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783667790"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783667859"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783667875"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-rhel9-operator@sha256%3A6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator\u0026tag=1783667869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-sidecar-rhel9@sha256%3A93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9\u0026tag=1783667877"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3A1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055244"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784055382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Adf9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783668266"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783668288"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3Aa54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0?arch=arm64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783669219"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-68157",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-06T00:01:03.150548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437210"
}
],
"notes": [
{
"category": "description",
"text": "An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack\u2019s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to HTTP(S) URLs outside the allow-list. This is a policy/allow-list bypass that enables build-time SSRF behavior (requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion in build outputs (redirected content is treated as module source and bundled).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68157"
},
{
"category": "external",
"summary": "RHBZ#2437210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437210"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68157",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68157"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68157",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68157"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack/security/advisories/GHSA-38r7-794h-5758",
"url": "https://github.com/webpack/webpack/security/advisories/GHSA-38r7-794h-5758"
}
],
"release_date": "2026-02-05T23:08:13.214000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects"
},
{
"cve": "CVE-2025-68458",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-06T00:01:00.165396+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437209"
}
],
"notes": [
{
"category": "description",
"text": "An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack\u2019s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68458"
},
{
"category": "external",
"summary": "RHBZ#2437209",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437209"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68458"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x",
"url": "https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x"
}
],
"release_date": "2026-02-05T23:08:01.102000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-25128",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-01-30T16:01:27.320561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2435497"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the fast-xml-parser npm library. In fast-xml-parser, a RangeError vulnerability exists in the numeric entity processing of fast-xml-parser when parsing XML with out-of-range entity code points (e.g., `\u0026#9999999;` or `\u0026#xFFFFFF;`). This causes the parser to throw an uncaught exception, crashing any application that processes untrusted XML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The availability impact of this flaw is limited to the application which bundles the fast-xml-parser library. Red Hat host systems are not at risk of availability impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25128"
},
{
"category": "external",
"summary": "RHBZ#2435497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2435497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25128",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25128"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25128",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25128"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e387f61c4a5cef792f6a2f42467013290bf95dc",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e387f61c4a5cef792f6a2f42467013290bf95dc"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.4",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.4"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-37qj-frw5-hhjh",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-37qj-frw5-hhjh"
}
],
"release_date": "2026-01-30T15:14:58.244000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug"
},
{
"cve": "CVE-2026-25896",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-02-20T22:01:59.622413+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441501"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted XML input. The system incorrectly interprets a dot in a DOCTYPE entity name as a regular expression wildcard during processing. This allows the attacker to bypass security measures and inject malicious scripts, resulting in Cross-Site Scripting (XSS) when the parsed output is displayed to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been assessed as IMPORTANT for Red Hat products. This vulnerability arises when the parsed XML output is subsequently rendered to users which requires the interaction of the user. The impact of this flaw is also limited to the user\u0027s browser context.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25896"
},
{
"category": "external",
"summary": "RHBZ#2441501",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441501"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25896"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25896",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25896"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2"
}
],
"release_date": "2026-02-20T20:57:48.074000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling"
},
{
"cve": "CVE-2026-26278",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-02-19T21:03:33.363864+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441120"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted, small XML input. This input can force the XML parser to perform an unlimited amount of entity expansion, consuming excessive resources. This can lead to the application freezing for an extended period, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26278"
},
{
"category": "external",
"summary": "RHBZ#2441120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441120"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26278"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj"
}
],
"release_date": "2026-02-19T19:40:55.842000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion"
},
{
"cve": "CVE-2026-26996",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-20T04:01:11.896063+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441268"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: minimatch: Denial of Service via specially crafted glob patterns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "RHBZ#2441268",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441268"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5",
"url": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"
}
],
"release_date": "2026-02-20T03:05:21.105000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns"
},
{
"cve": "CVE-2026-27904",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-26T02:01:23.004531+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442922"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "RHBZ#2442922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442922"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"
}
],
"release_date": "2026-02-26T01:07:42.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions"
},
{
"cve": "CVE-2026-27942",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-02-26T03:01:53.367202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A user can exploit this flaw by processing specially crafted XML data with the XML builder when the `preserveOrder` option is enabled. This can lead to a stack overflow, causing the application to crash and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The flaw affects the XML builder component of the fast-xml-parser library and is triggered only when the preserveOrder option is explicitly enabled. In Red Hat\u2013shipped configurations, this option is not enabled by default, and the vulnerable code path is therefore not exercised under typical deployments.\nThe underlying issue results in uncontrolled recursion leading to a stack overflow condition, which causes the application to terminate unexpectedly. While this can be triggered via crafted input, the impact is limited strictly to denial of service (DoS) and does not provide a mechanism for arbitrary code execution, privilege escalation, or data disclosure.\nFurthermore, exploitation requires that the affected application processes attacker-controlled XML input through the XML builder functionality with the specific vulnerable configuration enabled. This significantly reduces the attack surface and introduces environmental constraints not considered in the generalized NVD scoring.\n\nGiven the absence of confidentiality and integrity impact, the requirement for non-default configuration, and the limitation of the impact to process termination, Red Hat considers the practical risk to be lower than the NVD assessment. As such, this issue is classified as Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27942"
},
{
"category": "external",
"summary": "RHBZ#2442938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27942"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27942",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27942"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3"
}
],
"release_date": "2026-02-26T01:22:11.383000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, configure applications using the `fast-xml-parser` XML builder to set the `preserveOrder` option to `false`. Alternatively, ensure that all XML input data is thoroughly validated before being passed to the builder to prevent the processing of malicious or malformed content.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-33036",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-20T06:02:18.306021+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449458"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "RHBZ#2449458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33036"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r"
}
],
"release_date": "2026-03-20T05:17:03.290000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33815",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:25.130006+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455975"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "RHBZ#2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4771",
"url": "https://pkg.go.dev/vuln/GO-2026-4771"
}
],
"release_date": "2026-04-07T15:19:24.344000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:41928
Vulnerability from csaf_redhat - Published: 2026-07-20 08:34 - Updated: 2026-08-10 19:51Summary
Red Hat Security Advisory: Red Hat Migration Toolkit for Containers
Severity
Important
Notes
Topic: A new version of Migration Toolkit for Containers (MTC) is now available.
Details: The Migration Toolkit for Containers (MTC) enables you to migrate
Kubernetes resources, persistent volume data, and internal container images
between OpenShift Container Platform clusters, using the MTC web console or
the Kubernetes API.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data. This presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.
5.4 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response. This path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: 'stream'.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Moderate
A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server's memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.
6.8 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as '/', and enables WebSocket (ws: true) forwarding, the development server's own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser's cookies and Origin header to the proxy target, bypassing the server's Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.
7.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
References
448 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of Migration Toolkit for Containers (MTC) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The Migration Toolkit for Containers (MTC) enables you to migrate\nKubernetes resources, persistent volume data, and internal container images\nbetween OpenShift Container Platform clusters, using the MTC web console or\nthe Kubernetes API.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41928",
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-52881",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58754",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66418",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66471",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66506",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69223",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69227",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69228",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-7783",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-21441",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23490",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23745",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9595",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41928.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Migration Toolkit for Containers",
"tracking": {
"current_release_date": "2026-08-10T19:51:48+00:00",
"generator": {
"date": "2026-08-10T19:51:48+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:41928",
"initial_release_date": "2026-07-20T08:34:29+00:00",
"revision_history": [
{
"date": "2026-07-20T08:34:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T19:51:48+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Migration Toolkit 1.8",
"product": {
"name": "Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhmt:1.8::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Migration Toolkit"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-controller-rhel8@sha256%3Ac6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-controller-rhel8\u0026tag=1783953372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-hook-runner-rhel8@sha256%3A02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8\u0026tag=1783931722"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-log-reader-rhel8@sha256%3Aa95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8\u0026tag=1783914253"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-must-gather-rhel8@sha256%3A7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8\u0026tag=1783914261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-openvpn-rhel8@sha256%3Af7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8\u0026tag=1783914237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rhel8-operator@sha256%3A351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rhel8-operator\u0026tag=1783969382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-operator-bundle@sha256%3A7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-operator-bundle\u0026tag=1783969793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-registry-rhel8@sha256%3A69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-registry-rhel8\u0026tag=1783914276"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rsync-transfer-rhel8@sha256%3A5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8\u0026tag=1783914257"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-ui-rhel8@sha256%3Ad2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-ui-rhel8\u0026tag=1783690532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-velero-plugin-for-mtc-rhel8@sha256%3Aee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8\u0026tag=1783914255"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-7783",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2025-07-18T17:00:43.396637+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2381959"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data.\n\nThis presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: Unsafe random function in form-data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw does not affect host systems. The impact of this vulnerability is limited to specific applications which integrate the `form-data` library. As a result the impact of this CVE is limited on RedHat systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "RHBZ#2381959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2381959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-7783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0",
"url": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4"
}
],
"release_date": "2025-07-18T16:34:44.889000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "form-data: Unsafe random function in form-data"
},
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-52881",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2025-10-17T14:19:18.652000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2404715"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat considers this as an Important flaw since the impact is limited to local attack with minimal privileges in order to jeopardize the environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "RHBZ#2404715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-52881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm",
"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/selinux/pull/237",
"url": "https://github.com/opencontainers/selinux/pull/237"
}
],
"release_date": "2025-11-05T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Potential mitigations for this issue include:\n\n* Using rootless containers, as doing so will block most of the inadvertent writes (runc would run with reduced privileges, making attempts to write to procfs files ineffective).\n* Based on our analysis, neither AppArmor or SELinux can protect against the full version of the redirected write attack. The container runtime is generally privileged enough to write to arbitrary procfs files, which is more than sufficient to cause a container breakout.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2025-58754",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-09-12T02:00:53.897605+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2394735"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response.\nThis path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: \u0027stream\u0027.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios DoS via lack of data size check",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Availability impact is limited to the application which bundles axios and not the host Red Hat system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "RHBZ#2394735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2394735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58754"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593",
"url": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/7011",
"url": "https://github.com/axios/axios/pull/7011"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.12.0",
"url": "https://github.com/axios/axios/releases/tag/v1.12.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj"
}
],
"release_date": "2025-09-12T01:16:40.513000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios DoS via lack of data size check"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in urllib3\u0027s streaming API that can lead to excessive resource consumption, including high CPU usage and significant memory allocation. When processing highly compressed data from untrusted sources, even small requested chunks can trigger full decompression, posing a denial-of-service risk to client-side applications utilizing affected urllib3 versions prior to 2.6.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2025-66506",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2025-12-04T23:01:20.507333+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419056"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat as Fulcio, a certificate authority used for issuing code signing certificates, is susceptible to a denial of service when processing a specially crafted OpenID Connect (OIDC) token. This could lead to resource exhaustion and service unavailability in affected Red Hat products that utilize Fulcio.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "RHBZ#2419056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a",
"url": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw",
"url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw"
}
],
"release_date": "2025-12-04T22:04:41.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69223",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T20:01:19.831548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427456"
}
],
"notes": [
{
"category": "description",
"text": "A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host\u0027s memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "RHBZ#2427456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69223",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a",
"url": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg"
}
],
"release_date": "2026-01-05T22:00:17.715000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb"
},
{
"cve": "CVE-2025-69227",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-01-06T00:01:17.036900+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via specially crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products as it can lead to a Denial of Service (DoS) in applications utilizing the `aiohttp` library. Exploitation requires Python optimizations to be explicitly enabled (e.g., via `-O` or `PYTHONOPTIMIZE=1`) and the application to process POST requests using the `Request.post()` method. Red Hat products are affected if they meet these specific configuration and usage criteria.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "RHBZ#2427256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259",
"url": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23"
}
],
"release_date": "2026-01-05T23:19:31.396000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via specially crafted POST request"
},
{
"cve": "CVE-2025-69228",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T00:01:02.119065+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427254"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server\u0027s memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. A flaw in aiohttp allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted POST request to an aiohttp server that utilizes the `Request.post()` method. This can lead to uncontrolled memory consumption, freezing the server and making the server unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "RHBZ#2427254",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427254"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69228",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60",
"url": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf"
}
],
"release_date": "2026-01-05T23:30:33.440000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9595",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-15T16:01:15.427658+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488934"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as \u0027/\u0027, and enables WebSocket (ws: true) forwarding, the development server\u0027s own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser\u0027s cookies and Origin header to the proxy target, bypassing the server\u0027s Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "RHBZ#2488934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488934"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/facebook/create-react-app/pull/7444",
"url": "https://github.com/facebook/create-react-app/pull/7444"
},
{
"category": "external",
"summary": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb",
"url": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/pull/4316",
"url": "https://github.com/webpack/webpack-dev-server/pull/4316"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79",
"url": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79"
}
],
"release_date": "2026-06-15T15:00:21.488000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid configuring `webpack-dev-server` with a broad proxy context (e.g., `/`) when WebSocket forwarding (`ws: true`) is enabled. Instead, define specific paths for the proxy context. Alternatively, disable WebSocket forwarding by omitting `ws: true` from the proxy entry if WebSocket functionality is not required for the proxy target. This configuration change may require restarting the `webpack-dev-server` instance to take effect.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"cve": "CVE-2026-23745",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-01-16T23:01:26.508727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430538"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the node-tar library. The flaw allows an attacker to perform arbitrary file overwrite and symlink poisoning by crafting malicious tar archives. This occurs due to insufficient path sanitization of hardlink and symbolic link entries, even when the default secure behavior (preservePaths is false) is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "RHBZ#2430538",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430538"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23745"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e",
"url": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97"
}
],
"release_date": "2026-01-16T22:00:08.769000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:41941
Vulnerability from csaf_redhat - Published: 2026-07-20 09:38 - Updated: 2026-08-10 19:51Summary
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update
Severity
Important
Notes
Topic: Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update
Details: Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update
FIXED BUGS:
==========
DFBUGS-7343: RHODF 4.18.25 release
DFBUGS-7010: [GSS] kube-rbac-proxy in OCS metrics exporter logging full bearer tokens
DFBUGS-6941: [4.18.z] Integrate ibm-storage-odf-operator 1.9.0
DFBUGS-6821: [GSS] noobaa DB grows with errors BlockStoreAzure _delete_blocks failed for block
DFBUGS-6524: CLONE 4.18 - [UI] Resource profile calculations doesn't include NFS
DFBUGS-6462: Backport to odf-4.18.z [RDR] Partial s3StoreProfile missing in ramen-hub-operator-config after upgrading hub from ODF 4.17 to 4.18
DFBUGS-6406: [Backport to odf-4.18.z] Fail upgrade Provider with client cluster. ocs-operator csv stuck in pending
DFBUGS-6178: Backport to odf-4.18.z Noobaa POD keeps Failing when Clusterwide encryption is enabled with IBM KeyProtect on ROKS Cluster
DFBUGS-4848: [Backport to odf-4.18.z] [GSS] Noobaa certificate verification for NamespaceStore endpoints
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leading to inconsistent data being returned to the application.
7.0 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Threats
Impact
Moderate
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Moderate
An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to HTTP(S) URLs outside the allow-list. This is a policy/allow-list bypass that enables build-time SSRF behavior (requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion in build outputs (redirected content is treated as module source and bundled).
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Low
An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled).
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Low
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted XML input. The system incorrectly interprets a dot in a DOCTYPE entity name as a regular expression wildcard during processing. This allows the attacker to bypass security measures and inject malicious scripts, resulting in Cross-Site Scripting (XSS) when the parsed output is displayed to users.
7.1 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted, small XML input. This input can force the XML parser to perform an unlimited amount of entity expansion, consuming excessive resources. This can lead to the application freezing for an extended period, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.
6.5 (Medium)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Threats
Impact
Moderate
A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).
6.5 (Medium)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Threats
Impact
Moderate
A flaw was found in fast-xml-parser. A user can exploit this flaw by processing specially crafted XML data with the XML builder when the `preserveOrder` option is enabled. This can lead to a stack overflow, causing the application to crash and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
References
174 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Data Foundation 4.18.25 security, enhancement \u0026 bug fix update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Data Foundation 4.18.25 security, enhancement \u0026 bug fix update\n\nFIXED BUGS:\n==========\nDFBUGS-7343: RHODF 4.18.25 release\nDFBUGS-7010: [GSS] kube-rbac-proxy in OCS metrics exporter logging full bearer tokens\nDFBUGS-6941: [4.18.z] Integrate ibm-storage-odf-operator 1.9.0\nDFBUGS-6821: [GSS] noobaa DB grows with errors BlockStoreAzure _delete_blocks failed for block\nDFBUGS-6524: CLONE 4.18 - [UI] Resource profile calculations doesn\u0027t include NFS\nDFBUGS-6462: Backport to odf-4.18.z [RDR] Partial s3StoreProfile missing in ramen-hub-operator-config after upgrading hub from ODF 4.17 to 4.18\nDFBUGS-6406: [Backport to odf-4.18.z] Fail upgrade Provider with client cluster. ocs-operator csv stuck in pending\nDFBUGS-6178: Backport to odf-4.18.z Noobaa POD keeps Failing when Clusterwide encryption is enabled with IBM KeyProtect on ROKS Cluster\nDFBUGS-4848: [Backport to odf-4.18.z] [GSS] Noobaa certificate verification for NamespaceStore endpoints",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41941",
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47907",
"url": "https://access.redhat.com/security/cve/CVE-2025-47907"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68157",
"url": "https://access.redhat.com/security/cve/CVE-2025-68157"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68458",
"url": "https://access.redhat.com/security/cve/CVE-2025-68458"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25896",
"url": "https://access.redhat.com/security/cve/CVE-2026-25896"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26278",
"url": "https://access.redhat.com/security/cve/CVE-2026-26278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26996",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27904",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27942",
"url": "https://access.redhat.com/security/cve/CVE-2026-27942"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33036",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41941.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.25 security, enhancement \u0026 bug fix update",
"tracking": {
"current_release_date": "2026-08-10T19:51:50+00:00",
"generator": {
"date": "2026-08-10T19:51:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:41941",
"initial_release_date": "2026-07-20T09:38:34+00:00",
"revision_history": [
{
"date": "2026-07-20T09:38:34+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T19:51:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Openshift Data Foundation 4.18",
"product": {
"name": "Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Openshift Data Foundation"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783676191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783929816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-operator-bundle@sha256%3Ac291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-operator-bundle\u0026tag=1784096750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3Ab60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784094353"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784093953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"product_id": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-operator-bundle@sha256%3A0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-operator-bundle\u0026tag=1784096858"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784094943"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783676585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-operator-bundle@sha256%3Ab510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-operator-bundle\u0026tag=1784097043"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783676649"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783676675"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"product_id": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-operator-bundle@sha256%3A2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-operator-bundle\u0026tag=1784097072"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784094299"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3Afb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784094725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3Ad36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783676820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783676883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-operator-bundle@sha256%3A30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-operator-bundle\u0026tag=1784097114"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783676894"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"product_id": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-dependencies-operator-bundle@sha256%3Aa849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-dependencies-operator-bundle\u0026tag=1784097121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3Af476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784095175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1783676977"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-operator-bundle@sha256%3Ad1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-operator-bundle\u0026tag=1784097210"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784093503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Aacf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783677297"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"product_id": "registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-operator-bundle@sha256%3Ad5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-operator-bundle\u0026tag=1784097342"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"product_id": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-prometheus-operator-bundle@sha256%3A98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-prometheus-operator-bundle\u0026tag=1784097330"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"product_id": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-cluster-operator-bundle@sha256%3A2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-cluster-operator-bundle\u0026tag=1784097240"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"product_id": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-hub-operator-bundle@sha256%3A7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-hub-operator-bundle\u0026tag=1784097501"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783677345"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"product_id": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-recipe-operator-bundle@sha256%3Aa7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-recipe-operator-bundle\u0026tag=1784097684"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b?arch=amd64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783677533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"product_id": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-operator-bundle@sha256%3A34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0?arch=amd64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-operator-bundle\u0026tag=1784098364"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783676191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3Ac51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783929816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784094353"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3Aa36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784093953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3Ad50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784094943"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3Ad8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783676585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783676649"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3Aaa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783676675"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3Ad7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784094299"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3A59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784094725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783676820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783676883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783676894"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3Af32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784095175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1783676977"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3Adb1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784093503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Ad713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783677297"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783677345"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783677533"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3Ada2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661?arch=s390x\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783676191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3Ac2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5?arch=s390x\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783929816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5?arch=s390x\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784094353"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3Adc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884?arch=s390x\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784093953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3Af599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784094943"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783676585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783676649"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783676675"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784094299"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3Ab02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784094725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783676820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783676883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3Ab07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783676894"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3Afdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784095175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1783676977"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784093503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Acb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783677297"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783677345"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3Ac181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404?arch=s390x\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783677533"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d?arch=arm64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783929816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3Aeb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0?arch=arm64\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784093953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783676585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783676675"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3Ab758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784094299"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3Aa0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783676883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3Ad87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783676894"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1783676977"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3Aca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784093503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3A01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783677297"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3Ad5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783677345"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-47907",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"discovery_date": "2025-08-07T16:01:06.247481+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2387083"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leading to inconsistent data being returned to the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "database/sql: Postgres Scan Race Condition",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability marked as Moderate severity issues rather than Important. The os/exec LookPath flaw requires a misconfigured PATH to be exploitable, and the database/sql race condition primarily impacts applications that cancel queries while running multiple queries concurrently. Both can cause unexpected behavior, but the exploitation scope is limited and unlikely to result in direct compromise in most typical deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47907"
},
{
"category": "external",
"summary": "RHBZ#2387083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2387083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47907",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47907"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47907",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47907"
},
{
"category": "external",
"summary": "https://go.dev/cl/693735",
"url": "https://go.dev/cl/693735"
},
{
"category": "external",
"summary": "https://go.dev/issue/74831",
"url": "https://go.dev/issue/74831"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/x5MKroML2yM",
"url": "https://groups.google.com/g/golang-announce/c/x5MKroML2yM"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3849",
"url": "https://pkg.go.dev/vuln/GO-2025-3849"
}
],
"release_date": "2025-08-07T15:25:30.704000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "database/sql: Postgres Scan Race Condition"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-68157",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-06T00:01:03.150548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437210"
}
],
"notes": [
{
"category": "description",
"text": "An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack\u2019s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to HTTP(S) URLs outside the allow-list. This is a policy/allow-list bypass that enables build-time SSRF behavior (requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion in build outputs (redirected content is treated as module source and bundled).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68157"
},
{
"category": "external",
"summary": "RHBZ#2437210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437210"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68157",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68157"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68157",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68157"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack/security/advisories/GHSA-38r7-794h-5758",
"url": "https://github.com/webpack/webpack/security/advisories/GHSA-38r7-794h-5758"
}
],
"release_date": "2026-02-05T23:08:13.214000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects"
},
{
"cve": "CVE-2025-68458",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-06T00:01:00.165396+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437209"
}
],
"notes": [
{
"category": "description",
"text": "An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack\u2019s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68458"
},
{
"category": "external",
"summary": "RHBZ#2437209",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437209"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68458"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x",
"url": "https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x"
}
],
"release_date": "2026-02-05T23:08:01.102000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25896",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-02-20T22:01:59.622413+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441501"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted XML input. The system incorrectly interprets a dot in a DOCTYPE entity name as a regular expression wildcard during processing. This allows the attacker to bypass security measures and inject malicious scripts, resulting in Cross-Site Scripting (XSS) when the parsed output is displayed to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been assessed as IMPORTANT for Red Hat products. This vulnerability arises when the parsed XML output is subsequently rendered to users which requires the interaction of the user. The impact of this flaw is also limited to the user\u0027s browser context.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25896"
},
{
"category": "external",
"summary": "RHBZ#2441501",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441501"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25896"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25896",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25896"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2"
}
],
"release_date": "2026-02-20T20:57:48.074000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling"
},
{
"cve": "CVE-2026-26278",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-02-19T21:03:33.363864+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441120"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted, small XML input. This input can force the XML parser to perform an unlimited amount of entity expansion, consuming excessive resources. This can lead to the application freezing for an extended period, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26278"
},
{
"category": "external",
"summary": "RHBZ#2441120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441120"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26278"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj"
}
],
"release_date": "2026-02-19T19:40:55.842000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion"
},
{
"cve": "CVE-2026-26996",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-20T04:01:11.896063+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441268"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: minimatch: Denial of Service via specially crafted glob patterns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "RHBZ#2441268",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441268"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5",
"url": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"
}
],
"release_date": "2026-02-20T03:05:21.105000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns"
},
{
"cve": "CVE-2026-27904",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-26T02:01:23.004531+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442922"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "RHBZ#2442922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442922"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"
}
],
"release_date": "2026-02-26T01:07:42.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions"
},
{
"cve": "CVE-2026-27942",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-02-26T03:01:53.367202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A user can exploit this flaw by processing specially crafted XML data with the XML builder when the `preserveOrder` option is enabled. This can lead to a stack overflow, causing the application to crash and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The flaw affects the XML builder component of the fast-xml-parser library and is triggered only when the preserveOrder option is explicitly enabled. In Red Hat\u2013shipped configurations, this option is not enabled by default, and the vulnerable code path is therefore not exercised under typical deployments.\nThe underlying issue results in uncontrolled recursion leading to a stack overflow condition, which causes the application to terminate unexpectedly. While this can be triggered via crafted input, the impact is limited strictly to denial of service (DoS) and does not provide a mechanism for arbitrary code execution, privilege escalation, or data disclosure.\nFurthermore, exploitation requires that the affected application processes attacker-controlled XML input through the XML builder functionality with the specific vulnerable configuration enabled. This significantly reduces the attack surface and introduces environmental constraints not considered in the generalized NVD scoring.\n\nGiven the absence of confidentiality and integrity impact, the requirement for non-default configuration, and the limitation of the impact to process termination, Red Hat considers the practical risk to be lower than the NVD assessment. As such, this issue is classified as Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27942"
},
{
"category": "external",
"summary": "RHBZ#2442938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27942"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27942",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27942"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3"
}
],
"release_date": "2026-02-26T01:22:11.383000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, configure applications using the `fast-xml-parser` XML builder to set the `preserveOrder` option to `false`. Alternatively, ensure that all XML input data is thoroughly validated before being passed to the builder to prevent the processing of malicious or malformed content.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-33036",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-20T06:02:18.306021+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449458"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "RHBZ#2449458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33036"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r"
}
],
"release_date": "2026-03-20T05:17:03.290000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:41944
Vulnerability from csaf_redhat - Published: 2026-07-20 09:45 - Updated: 2026-08-10 19:00Summary
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update
Severity
Important
Notes
Topic: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update
Details: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update
FIXED BUGS:
==========
DFBUGS-7342: RHODF 4.19.20 release
DFBUGS-7332: [Backport for 4.19] - [GSS][ODF][MCG] noobaa-db-pg-cluster won't synchronize anymore - "could not receive data from WAL stream: ERROR: requested WAL segment 00000008000001C600000068 has already been removed"
DFBUGS-6940: [4.19.z] Integrate ibm-storage-odf-operator 1.9.0
DFBUGS-6542: [ODF 4.19.z CLONE] - Provider Server sends sub channel to client only when provider side csv is at the tip of the sub channel in the catalogsource
DFBUGS-6529: [Backport to 4.19.z] maintenance mode is always set for storageclients in non RDR clusters
DFBUGS-6523: CLONE 4.19 - [UI] Resource profile calculations doesn't include NFS
DFBUGS-4768: [Backport to odf-4.19.z]Remove duplicate PersistentVolumeUsageCritical alerts
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Moderate
An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to HTTP(S) URLs outside the allow-list. This is a policy/allow-list bypass that enables build-time SSRF behavior (requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion in build outputs (redirected content is treated as module source and bundled).
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Low
An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled).
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Low
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw has been discovered in the fast-xml-parser npm library. In fast-xml-parser, a RangeError vulnerability exists in the numeric entity processing of fast-xml-parser when parsing XML with out-of-range entity code points (e.g., `�` or `�`). This causes the parser to throw an uncaught exception, crashing any application that processes untrusted XML input.
5.3 (Medium)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted XML input. The system incorrectly interprets a dot in a DOCTYPE entity name as a regular expression wildcard during processing. This allows the attacker to bypass security measures and inject malicious scripts, resulting in Cross-Site Scripting (XSS) when the parsed output is displayed to users.
7.1 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted, small XML input. This input can force the XML parser to perform an unlimited amount of entity expansion, consuming excessive resources. This can lead to the application freezing for an extended period, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.
6.5 (Medium)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Threats
Impact
Moderate
A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).
6.5 (Medium)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Threats
Impact
Moderate
A flaw was found in fast-xml-parser. A user can exploit this flaw by processing specially crafted XML data with the XML builder when the `preserveOrder` option is enabled. This can lead to a stack overflow, causing the application to crash and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
References
146 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Data Foundation 4.19.20 security, enhancement \u0026 bug fix update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Data Foundation 4.19.20 security, enhancement \u0026 bug fix update\n\nFIXED BUGS:\n==========\nDFBUGS-7342: RHODF 4.19.20 release\nDFBUGS-7332: [Backport for 4.19] - [GSS][ODF][MCG] noobaa-db-pg-cluster won\u0027t synchronize anymore - \"could not receive data from WAL stream: ERROR: requested WAL segment 00000008000001C600000068 has already been removed\"\nDFBUGS-6940: [4.19.z] Integrate ibm-storage-odf-operator 1.9.0\nDFBUGS-6542: [ODF 4.19.z CLONE] - Provider Server sends sub channel to client only when provider side csv is at the tip of the sub channel in the catalogsource\nDFBUGS-6529: [Backport to 4.19.z] maintenance mode is always set for storageclients in non RDR clusters\nDFBUGS-6523: CLONE 4.19 - [UI] Resource profile calculations doesn\u0027t include NFS\nDFBUGS-4768: [Backport to odf-4.19.z]Remove duplicate PersistentVolumeUsageCritical alerts",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41944",
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68157",
"url": "https://access.redhat.com/security/cve/CVE-2025-68157"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68458",
"url": "https://access.redhat.com/security/cve/CVE-2025-68458"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25128",
"url": "https://access.redhat.com/security/cve/CVE-2026-25128"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25896",
"url": "https://access.redhat.com/security/cve/CVE-2026-25896"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26278",
"url": "https://access.redhat.com/security/cve/CVE-2026-26278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26996",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27904",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27942",
"url": "https://access.redhat.com/security/cve/CVE-2026-27942"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33036",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41944.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement \u0026 bug fix update",
"tracking": {
"current_release_date": "2026-08-10T19:00:33+00:00",
"generator": {
"date": "2026-08-10T19:00:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:41944",
"initial_release_date": "2026-07-20T09:45:40+00:00",
"revision_history": [
{
"date": "2026-07-20T09:45:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T19:00:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Openshift Data Foundation 4.19",
"product": {
"name": "Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Openshift Data Foundation"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783684360"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783684068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-operator-bundle@sha256%3Aabcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-operator-bundle\u0026tag=1784057956"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054582"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784054606"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"product_id": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-operator-bundle@sha256%3A8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-operator-bundle\u0026tag=1784058120"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055295"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783684603"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-operator-bundle@sha256%3A4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-operator-bundle\u0026tag=1784058267"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783684668"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783684667"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"product_id": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-operator-bundle@sha256%3A1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-operator-bundle\u0026tag=1784058383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784054873"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783684707"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3Ae68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783684779"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3Af25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783684831"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-operator-bundle@sha256%3A0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-operator-bundle\u0026tag=1784058492"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783684839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"product_id": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-dependencies-operator-bundle@sha256%3Aa2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-dependencies-operator-bundle\u0026tag=1784058519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3A3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3Aae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055558"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-operator-bundle@sha256%3A8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-operator-bundle\u0026tag=1784058706"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784056134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Ae46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783685128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"product_id": "registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-operator-bundle@sha256%3Aa39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-operator-bundle\u0026tag=1784058758"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"product_id": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-prometheus-operator-bundle@sha256%3A6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-prometheus-operator-bundle\u0026tag=1784058766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"product_id": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-cluster-operator-bundle@sha256%3A3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-cluster-operator-bundle\u0026tag=1784058817"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"product_id": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-hub-operator-bundle@sha256%3Aa2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-hub-operator-bundle\u0026tag=1784058873"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783685129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"product_id": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-recipe-operator-bundle@sha256%3Af24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-recipe-operator-bundle\u0026tag=1784059031"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4?arch=amd64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783685375"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"product_id": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-operator-bundle@sha256%3A61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8?arch=amd64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-operator-bundle\u0026tag=1784059042"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783684360"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783684068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054582"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784054606"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055295"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3Ab7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783684603"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783684668"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783684667"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784054873"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783684707"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3Abd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783684779"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3Aed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783684831"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3Ad6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783684839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3Add210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055558"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784056134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Ad61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783685128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783685129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783685375"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f?arch=s390x\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783684360"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3Af37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299?arch=s390x\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783684068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4?arch=s390x\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054582"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d?arch=s390x\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784054606"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055295"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783684603"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783684668"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783684667"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3Aced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784054873"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783684707"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3A00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3Ade17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783684779"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783684831"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783684839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3A780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055558"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3Aa754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784056134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3A8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783685128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783685129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833?arch=s390x\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783685375"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3Aa3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be?arch=arm64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783684068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229?arch=arm64\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784054606"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055295"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3Af522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783684603"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783684668"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783684667"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784054873"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783684707"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3A5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783684779"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3Ad51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783684831"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783684839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3Ae193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055558"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3Aba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784056134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Ae88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783685128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783685129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9?arch=arm64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783685375"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-68157",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-06T00:01:03.150548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437210"
}
],
"notes": [
{
"category": "description",
"text": "An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack\u2019s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to HTTP(S) URLs outside the allow-list. This is a policy/allow-list bypass that enables build-time SSRF behavior (requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion in build outputs (redirected content is treated as module source and bundled).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68157"
},
{
"category": "external",
"summary": "RHBZ#2437210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437210"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68157",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68157"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68157",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68157"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack/security/advisories/GHSA-38r7-794h-5758",
"url": "https://github.com/webpack/webpack/security/advisories/GHSA-38r7-794h-5758"
}
],
"release_date": "2026-02-05T23:08:13.214000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects"
},
{
"cve": "CVE-2025-68458",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-06T00:01:00.165396+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437209"
}
],
"notes": [
{
"category": "description",
"text": "An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack\u2019s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68458"
},
{
"category": "external",
"summary": "RHBZ#2437209",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437209"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68458"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x",
"url": "https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x"
}
],
"release_date": "2026-02-05T23:08:01.102000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25128",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-01-30T16:01:27.320561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2435497"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the fast-xml-parser npm library. In fast-xml-parser, a RangeError vulnerability exists in the numeric entity processing of fast-xml-parser when parsing XML with out-of-range entity code points (e.g., `\u0026#9999999;` or `\u0026#xFFFFFF;`). This causes the parser to throw an uncaught exception, crashing any application that processes untrusted XML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The availability impact of this flaw is limited to the application which bundles the fast-xml-parser library. Red Hat host systems are not at risk of availability impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25128"
},
{
"category": "external",
"summary": "RHBZ#2435497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2435497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25128",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25128"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25128",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25128"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e387f61c4a5cef792f6a2f42467013290bf95dc",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e387f61c4a5cef792f6a2f42467013290bf95dc"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.4",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.4"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-37qj-frw5-hhjh",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-37qj-frw5-hhjh"
}
],
"release_date": "2026-01-30T15:14:58.244000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug"
},
{
"cve": "CVE-2026-25896",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-02-20T22:01:59.622413+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441501"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted XML input. The system incorrectly interprets a dot in a DOCTYPE entity name as a regular expression wildcard during processing. This allows the attacker to bypass security measures and inject malicious scripts, resulting in Cross-Site Scripting (XSS) when the parsed output is displayed to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been assessed as IMPORTANT for Red Hat products. This vulnerability arises when the parsed XML output is subsequently rendered to users which requires the interaction of the user. The impact of this flaw is also limited to the user\u0027s browser context.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25896"
},
{
"category": "external",
"summary": "RHBZ#2441501",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441501"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25896"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25896",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25896"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2"
}
],
"release_date": "2026-02-20T20:57:48.074000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling"
},
{
"cve": "CVE-2026-26278",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-02-19T21:03:33.363864+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441120"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted, small XML input. This input can force the XML parser to perform an unlimited amount of entity expansion, consuming excessive resources. This can lead to the application freezing for an extended period, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26278"
},
{
"category": "external",
"summary": "RHBZ#2441120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441120"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26278"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj"
}
],
"release_date": "2026-02-19T19:40:55.842000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion"
},
{
"cve": "CVE-2026-26996",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-20T04:01:11.896063+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441268"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: minimatch: Denial of Service via specially crafted glob patterns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "RHBZ#2441268",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441268"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5",
"url": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"
}
],
"release_date": "2026-02-20T03:05:21.105000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns"
},
{
"cve": "CVE-2026-27904",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-26T02:01:23.004531+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442922"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "RHBZ#2442922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442922"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"
}
],
"release_date": "2026-02-26T01:07:42.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions"
},
{
"cve": "CVE-2026-27942",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-02-26T03:01:53.367202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A user can exploit this flaw by processing specially crafted XML data with the XML builder when the `preserveOrder` option is enabled. This can lead to a stack overflow, causing the application to crash and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The flaw affects the XML builder component of the fast-xml-parser library and is triggered only when the preserveOrder option is explicitly enabled. In Red Hat\u2013shipped configurations, this option is not enabled by default, and the vulnerable code path is therefore not exercised under typical deployments.\nThe underlying issue results in uncontrolled recursion leading to a stack overflow condition, which causes the application to terminate unexpectedly. While this can be triggered via crafted input, the impact is limited strictly to denial of service (DoS) and does not provide a mechanism for arbitrary code execution, privilege escalation, or data disclosure.\nFurthermore, exploitation requires that the affected application processes attacker-controlled XML input through the XML builder functionality with the specific vulnerable configuration enabled. This significantly reduces the attack surface and introduces environmental constraints not considered in the generalized NVD scoring.\n\nGiven the absence of confidentiality and integrity impact, the requirement for non-default configuration, and the limitation of the impact to process termination, Red Hat considers the practical risk to be lower than the NVD assessment. As such, this issue is classified as Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27942"
},
{
"category": "external",
"summary": "RHBZ#2442938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27942"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27942",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27942"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3"
}
],
"release_date": "2026-02-26T01:22:11.383000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, configure applications using the `fast-xml-parser` XML builder to set the `preserveOrder` option to `false`. Alternatively, ensure that all XML input data is thoroughly validated before being passed to the builder to prevent the processing of malicious or malformed content.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-33036",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-20T06:02:18.306021+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449458"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "RHBZ#2449458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33036"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r"
}
],
"release_date": "2026-03-20T05:17:03.290000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:48151
Vulnerability from csaf_redhat - Published: 2026-07-29 19:53 - Updated: 2026-08-10 19:11Summary
Red Hat Security Advisory: Red Hat build of Cryostat security update
Severity
Important
Notes
Topic: An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.
Security Fix(es):
* netty-handler: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)
* netty-resolver-dns: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)
* netty-handler: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)
* io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)
* netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)
* netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)
* netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)
* netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)
* io.quarkus/quarkus-vertx-http: Authorization bypass in HTTP path-based policies via encoded characters (CVE-2026-50559)
* jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)
* jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513)
* eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name (CVE-2026-6860)
* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
* golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
* golang.org/x/net/html: Cross-Site Scripting allowing arbitrary code execution (CVE-2026-25681)
* golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data (CVE-2026-46599)
* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder (CVE-2026-46384)
* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration (CVE-2026-46385)
* net: golang: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* mime: golang: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504)
* form-data: Form field override via CRLF injection (CVE-2026-12143)
* ws: Denial of Service via memory exhaustion from small WebSocket fragments (CVE-2026-48779)
* ws: Uninitialized memory disclosure via websocket.close() with TypedArray (CVE-2026-45736)
* undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151)
* undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697)
* undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)
* js-cookie: Cookie attribute manipulation via prototype pollution (CVE-2026-46625)
* brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)
* protobufjs: Denial of Service via crafted schema (CVE-2026-44290)
* protobufjs: Data integrity impact due to prototype pollution (CVE-2026-44292)
* protobufjs: Denial of Service via crafted JSON descriptors (CVE-2026-45740)
* protobufjs: Arbitrary Code Execution via prototype pollution (CVE-2026-44291)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in eclipse-vertx/vert.x. A remote attacker can exploit this vulnerability by performing a Transport Layer Security (TLS) handshake and presenting a server name extension with a server wildcard name. This can lead to a denial of service (DoS) condition, impacting the availability of the affected system.
5.3 (Medium)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js's default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.
8.1 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs. This vulnerability allows an attacker to craft a protobuf schema or JSON descriptor that, when processed, can traverse through inherited object properties. This can lead to writing to global JavaScript constructors, corrupting process-wide built-in functionality. The most significant impact is a denial of service (DoS).
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This prototype pollution vulnerability occurs when `Object.prototype` is polluted, allowing attacker-controlled properties to be resolved as valid protobuf type information. This can lead to attacker-controlled strings being emitted into generated JavaScript code, potentially resulting in arbitrary code execution.
8.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This vulnerability allows an attacker to manipulate the internal structure of message objects. By providing a specially crafted input, an attacker could alter the prototype of individual message instances, potentially leading to unauthorized modification of data or unexpected application behavior, thereby impacting data integrity.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.
8.7 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Threats
Impact
Important
A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the application unresponsive.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system's CPU is consumed indefinitely until the process is terminated.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `golang.org/x/image/tiff` package's TIFF decoder. This vulnerability occurs because the decoder does not properly limit the size of PackBits-compressed data. A remote attacker could exploit this by providing a maliciously-crafted image, leading to the decoder processing excessive amounts of data. This can result in a Denial of Service (DoS) due to resource exhaustion, even with a small input image.
6.5 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie's attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Threats
Impact
Important
A flaw was found in Netty's `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.
8.7 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Quarkus. A remote attacker could bypass HTTP path-based authorization policies by using specially crafted encoded semicolons, slashes, or backslashes in HTTP requests. This could allow unauthorized access to protected static resources, leading to information disclosure.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.
8.1 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.
8.1 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
References
272 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.\n\nSecurity Fix(es):\n\n* netty-handler: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)\n* netty-resolver-dns: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)\n* netty-handler: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)\n* io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)\n* netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)\n* netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)\n* netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)\n* netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)\n* io.quarkus/quarkus-vertx-http: Authorization bypass in HTTP path-based policies via encoded characters (CVE-2026-50559)\n* jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)\n* jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513)\n* eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name (CVE-2026-6860)\n* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)\n* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)\n* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)\n* golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n* golang.org/x/net/html: Cross-Site Scripting allowing arbitrary code execution (CVE-2026-25681)\n* golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data (CVE-2026-46599)\n* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder (CVE-2026-46384)\n* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration (CVE-2026-46385)\n* net: golang: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* mime: golang: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504)\n* form-data: Form field override via CRLF injection (CVE-2026-12143)\n* ws: Denial of Service via memory exhaustion from small WebSocket fragments (CVE-2026-48779)\n* ws: Uninitialized memory disclosure via websocket.close() with TypedArray (CVE-2026-45736)\n* undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151)\n* undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697)\n* undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)\n* js-cookie: Cookie attribute manipulation via prototype pollution (CVE-2026-46625)\n* brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)\n* protobufjs: Denial of Service via crafted schema (CVE-2026-44290)\n* protobufjs: Data integrity impact due to prototype pollution (CVE-2026-44292)\n* protobufjs: Denial of Service via crafted JSON descriptors (CVE-2026-45740)\n* protobufjs: Arbitrary Code Execution via prototype pollution (CVE-2026-44291)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:48151",
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466990"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2477081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477081"
},
{
"category": "external",
"summary": "2477088",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477088"
},
{
"category": "external",
"summary": "2477100",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477100"
},
{
"category": "external",
"summary": "2477111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477111"
},
{
"category": "external",
"summary": "2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "2483473",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483473"
},
{
"category": "external",
"summary": "2483475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
},
{
"category": "external",
"summary": "2483482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
},
{
"category": "external",
"summary": "2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "2486959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486959"
},
{
"category": "external",
"summary": "2487740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487740"
},
{
"category": "external",
"summary": "2488081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081"
},
{
"category": "external",
"summary": "2488383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488383"
},
{
"category": "external",
"summary": "2488391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391"
},
{
"category": "external",
"summary": "2488400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400"
},
{
"category": "external",
"summary": "2488429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488429"
},
{
"category": "external",
"summary": "2488437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488437"
},
{
"category": "external",
"summary": "2488439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439"
},
{
"category": "external",
"summary": "2488442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488442"
},
{
"category": "external",
"summary": "2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "2490018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
},
{
"category": "external",
"summary": "2490024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
},
{
"category": "external",
"summary": "2492010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492010"
},
{
"category": "external",
"summary": "2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "external",
"summary": "2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48151.json"
}
],
"title": "Red Hat Security Advisory: Red Hat build of Cryostat security update",
"tracking": {
"current_release_date": "2026-08-10T19:11:57+00:00",
"generator": {
"date": "2026-08-10T19:11:57+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:48151",
"initial_release_date": "2026-07-29T19:53:07+00:00",
"revision_history": [
{
"date": "2026-07-29T19:53:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-29T19:53:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T19:11:57+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cryostat 4 on RHEL 9",
"product": {
"name": "Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:cryostat:4::el9"
}
}
}
],
"category": "product_family",
"name": "Cryostat"
},
{
"branches": [
{
"category": "product_version",
"name": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"product": {
"name": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"product_id": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.7.0-11"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"product": {
"name": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"product_id": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.2.0-19"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"product": {
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"product": {
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"product": {
"name": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"product_id": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"product": {
"name": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"product_id": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"product": {
"name": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"product_id": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.2.0-11"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"product": {
"name": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"product_id": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.2.0-18"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"product": {
"name": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"product_id": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.2.0-19"
}
}
},
{
"category": "product_version",
"name": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64",
"product": {
"name": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64",
"product_id": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.2.0-13"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"product": {
"name": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"product_id": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.7.0-11"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"product": {
"name": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"product_id": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.2.0-19"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"product": {
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"product": {
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"product": {
"name": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"product_id": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"product": {
"name": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"product_id": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"product": {
"name": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"product_id": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.2.0-11"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"product": {
"name": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"product_id": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.2.0-18"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"product": {
"name": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"product_id": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.2.0-19"
}
}
},
{
"category": "product_version",
"name": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"product": {
"name": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"product_id": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.2.0-13"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64"
},
"product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64"
},
"product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64"
},
"product_reference": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64"
},
"product_reference": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64"
},
"product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
},
"product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64"
},
"product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
},
"product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64"
},
"product_reference": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64"
},
"product_reference": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64"
},
"product_reference": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64"
},
"product_reference": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64"
},
"product_reference": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64"
},
"product_reference": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64"
},
"product_reference": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64"
},
"product_reference": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64"
},
"product_reference": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
},
"product_reference": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64"
},
"product_reference": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
},
"product_reference": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6734",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"discovery_date": "2026-06-17T19:04:00.272340+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490024"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important security flaw. The `undici` library, when configured with `Socks5ProxyAgent` to handle requests for multiple origins, incorrectly reuses connection pools. This can lead to sensitive data and credentials being misrouted to unintended destinations, potentially downgrading HTTPS connections to HTTP and compromising data integrity and confidentiality. Red Hat products utilizing `undici` with `Socks5ProxyAgent` in multi-origin scenarios are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "RHBZ#2490024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6734"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj"
}
],
"release_date": "2026-06-17T16:36:55.439000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "The single most impactful mitigation is applying network egress controls to restrict which external destinations affected applications can reach. Because the vulnerability causes requests to be misrouted to wrong origins, limiting the set of reachable origins directly reduces the attack surface. These controls collectively limit the blast radius of the connection pool misrouting \u2014 the attacker must compromise one of the explicitly allowed destinations rather than any arbitrary origin \u2014 but they do not fix the underlying logic bug.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing"
},
{
"cve": "CVE-2026-6860",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-06T10:01:43.929832+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466990"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in eclipse-vertx/vert.x. A remote attacker can exploit this vulnerability by performing a Transport Layer Security (TLS) handshake and presenting a server name extension with a server wildcard name. This can lead to a denial of service (DoS) condition, impacting the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Moderate because a remote attacker can trigger a denial of service in Red Hat products that use `eclipse-vertx/vert.x` and are configured with TLS wildcard server names. Exploitation occurs during the TLS handshake, impacting service availability without affecting data confidentiality or integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6860"
},
{
"category": "external",
"summary": "RHBZ#2466990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6860"
},
{
"category": "external",
"summary": "https://github.com/eclipse-vertx/vert.x/pull/6102",
"url": "https://github.com/eclipse-vertx/vert.x/pull/6102"
},
{
"category": "external",
"summary": "https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-3g76-f9xq-8vp6",
"url": "https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-3g76-f9xq-8vp6"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/381",
"url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/381"
}
],
"release_date": "2026-05-06T09:55:12.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name"
},
{
"cve": "CVE-2026-9697",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-06-17T19:03:30.813843+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490018"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When undici\u0027s ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js\u0027s default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. Applications using `undici`\u0027s `ProxyAgent` with a SOCKS5 proxy URI will silently ignore user-configured TLS options, including custom Certificate Authorities. This bypasses intended security controls for HTTPS communication, enabling a remote attacker to perform Man-in-the-Middle attacks, potentially leading to information disclosure or arbitrary code execution in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "RHBZ#2490018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9697"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g"
}
],
"release_date": "2026-06-17T16:46:42.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-12151",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-17T17:01:45.297604+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the `undici` WebSocket client allows a remote attacker to cause unbounded memory growth. By sending numerous small or empty WebSocket frames, an unauthenticated attacker can exhaust system memory, leading to a denial of service in Red Hat products that use the affected client.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "RHBZ#2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q"
}
],
"release_date": "2026-06-17T16:05:38.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames"
},
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-44249",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-06-11T22:02:05.327173+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in netty-handler is rated as Important because a remote attacker can bypass configured IPv6 subnet filtering rules. This flaw, stemming from an incorrect masking operation, could allow unauthorized access to or exposure of services that are intended to be network-restricted within Red Hat products utilizing the affected Netty component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44249"
},
{
"category": "external",
"summary": "RHBZ#2488081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44249",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44249"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86",
"url": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86"
}
],
"release_date": "2026-06-11T20:46:14.110000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation"
},
{
"cve": "CVE-2026-44290",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-13T16:03:39.540492+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477100"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs. This vulnerability allows an attacker to craft a protobuf schema or JSON descriptor that, when processed, can traverse through inherited object properties. This can lead to writing to global JavaScript constructors, corrupting process-wide built-in functionality. The most significant impact is a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Denial of Service via crafted schema",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in protobufjs. A remote attacker could provide a specially crafted protobuf schema or JSON descriptor, which, when processed by an application using protobufjs, could corrupt process-wide built-in functionality, leading to a persistent denial of service. This impact is contingent on the application parsing untrusted schemas or descriptors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44290"
},
{
"category": "external",
"summary": "RHBZ#2477100",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477100"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44290",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44290"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44290",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44290"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jvwf-75h9-cwgg",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jvwf-75h9-cwgg"
}
],
"release_date": "2026-05-13T14:41:15.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, Red Hat recommends configuring applications to avoid parsing or loading protobuf schemas or JSON descriptors from untrusted sources. If processing untrusted schemas is unavoidable, implement strict validation to reject option names containing unsafe property path components before loading them. Additionally, consider running schema processing in an isolated environment to limit the blast radius of potential corruption.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Denial of Service via crafted schema"
},
{
"cve": "CVE-2026-44291",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-05-13T16:04:13.828371+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This prototype pollution vulnerability occurs when `Object.prototype` is polluted, allowing attacker-controlled properties to be resolved as valid protobuf type information. This can lead to attacker-controlled strings being emitted into generated JavaScript code, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in protobufjs, a JavaScript library, potentially enables arbitrary code execution when a separate prototype pollution vulnerability is present in an application. Exploitation requires an attacker to first pollute `Object.prototype` and then trigger protobufjs functionality that generates encode or decode code for affected types. Red Hat products utilizing `protobufjs` may be impacted if they are vulnerable to prototype pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44291"
},
{
"category": "external",
"summary": "RHBZ#2477111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44291"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44291",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44291"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-75px-5xx7-5xc7",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-75px-5xx7-5xc7"
}
],
"release_date": "2026-05-13T14:42:13.984000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation involves preventing prototype pollution within applications that utilize protobufjs. Administrators should ensure that untrusted input cannot pollute `Object.prototype` in the application or its dependencies. Additionally, isolating schema and message processing from untrusted application states can prevent attacker-controlled properties from being resolved as valid protobuf type information.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution"
},
{
"cve": "CVE-2026-44292",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-13T16:03:03.431568+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477088"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This vulnerability allows an attacker to manipulate the internal structure of message objects. By providing a specially crafted input, an attacker could alter the prototype of individual message instances, potentially leading to unauthorized modification of data or unexpected application behavior, thereby impacting data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Data integrity impact due to prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability where `protobufjs` can be exploited for prototype pollution on individual message instances. Applications that construct `protobufjs` messages from attacker-controlled plain objects, particularly those parsing untrusted JSON input, are susceptible to data integrity issues through manipulation of the object\u0027s prototype chain. This does not affect global prototypes but can lead to unexpected application behavior.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44292"
},
{
"category": "external",
"summary": "RHBZ#2477088",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477088"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44292"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44292",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44292"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-fx83-v9x8-x52w",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-fx83-v9x8-x52w"
}
],
"release_date": "2026-05-13T14:42:55.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications should avoid directly passing attacker-controlled plain objects to protobufjs message constructors. If processing untrusted JSON input, it is crucial to validate or sanitize object keys and explicitly reject any `__proto__` properties before constructing protobuf messages. This operational control prevents the manipulation of message instance prototypes.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Data integrity impact due to prototype pollution"
},
{
"cve": "CVE-2026-44893",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-06-12T15:01:18.066312+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488383"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important because a remote, unauthenticated attacker can trigger a denial of service in applications utilizing `netty-codec-haproxy`. By sending a specially crafted HAProxy message with a malformed SSL TLV header, an attacker can cause an `IndexOutOfBoundsException`, leading to unreleased memory and resource exhaustion. This can render the affected application unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44893"
},
{
"category": "external",
"summary": "RHBZ#2488383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44893"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44893",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44893"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv"
}
],
"release_date": "2026-06-12T14:00:25.801000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message"
},
{
"cve": "CVE-2026-45416",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-12T15:01:45.671884+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488391"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Netty is rated as Important. It allows a remote attacker to trigger a denial of service by sending a specially crafted TLS ClientHello message. The flaw arises from an eager, unbounded memory allocation during the TLS handshake, particularly when default configurations disable the maximum client hello length guard, leading to excessive resource consumption in affected Red Hat products utilizing Netty.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45416"
},
{
"category": "external",
"summary": "RHBZ#2488391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45416",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45416"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh",
"url": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh"
}
],
"release_date": "2026-06-12T14:10:05.585000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure applications utilizing Netty\u0027s `SslClientHelloHandler` to specify a non-zero value for the `maxClientHelloLength` parameter. This will enable the internal length validation, preventing the eager allocation of large memory buffers when processing crafted TLS ClientHello messages. Refer to your specific application\u0027s documentation for details on configuring Netty\u0027s TLS handler. A restart of the affected application or service is required for the configuration changes to take effect.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake"
},
{
"cve": "CVE-2026-45674",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T15:02:15.565158+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488400"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important severity flaw in Netty\u0027s DnsResolveContext allows a remote attacker to achieve information disclosure or data manipulation. By crafting malicious DNS responses, an attacker could redirect network traffic or intercept sensitive data, impacting applications utilizing Netty for DNS resolution in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45674"
},
{
"category": "external",
"summary": "RHBZ#2488400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45674"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc",
"url": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc"
}
],
"release_date": "2026-06-12T14:17:50.203000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-45740",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-05-13T16:02:41.729478+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Denial of Service via crafted JSON descriptors",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in protobufjs, which could allow a remote attacker to exhaust the JavaScript call stack by providing a specially crafted JSON descriptor with deeply nested namespace definitions. This vulnerability impacts Red Hat products that utilize protobufjs for processing protobuf definitions potentially leading to application unresponsiveness.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45740"
},
{
"category": "external",
"summary": "RHBZ#2477081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45740"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jggg-4jg4-v7c6",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jggg-4jg4-v7c6"
}
],
"release_date": "2026-05-13T14:46:02.689000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid loading untrusted protobuf JSON descriptors in applications utilizing protobufjs. If untrusted descriptors must be processed, implement validation at an outer boundary to reject excessively nested structures. Alternatively, isolate the descriptor loading process in an environment that can be safely restarted in case of a denial of service.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Denial of Service via crafted JSON descriptors"
},
{
"cve": "CVE-2026-46384",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-29T21:02:03.061736+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483482"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects multiple Avro decoder code paths in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing malformed or excessively large integer values that trigger unsafe integer truncation, arithmetic overflow conditions, or invalid memory allocation operations during decoding.\n\nThe vulnerability affects both 32-bit specific integer narrowing paths and several cross-platform arithmetic overflow conditions. There is only a denial-of-service impact but not confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "RHBZ#2483482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46384"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv"
}
],
"release_date": "2026-05-29T19:58:21.535000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder"
},
{
"cve": "CVE-2026-46385",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-05-29T21:01:37.087371+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483475"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system\u0027s CPU is consumed indefinitely until the process is terminated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects Avro array and map decoding functionality in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing excessively large block-count values followed by truncated or invalid data. Because the decoder continued iterating after the underlying reader entered an error state, affected applications may consume excessive CPU resources for extended periods of time, potentially leading to denial of service.\n\nThe currently available analysis demonstrates CPU exhaustion and service disruption but does not demonstrate confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "RHBZ#2483475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46385"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w"
}
],
"release_date": "2026-05-29T19:58:59.667000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46599",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-29T21:01:31.259450+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483473"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `golang.org/x/image/tiff` package\u0027s TIFF decoder. This vulnerability occurs because the decoder does not properly limit the size of PackBits-compressed data. A remote attacker could exploit this by providing a maliciously-crafted image, leading to the decoder processing excessive amounts of data. This can result in a Denial of Service (DoS) due to resource exhaustion, even with a small input image.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). A flaw was found in golang.org/x/image/tiff where the TIFF decoder does not limit the size of PackBits-compressed data. A maliciously crafted TIFF image with small declared dimensions can cause the decoder to process disproportionately large amounts of compressed data, leading to resource exhaustion. Exploitation requires user interaction (opening a crafted TIFF file). Most Red Hat products that bundle golang.org/x/image do not process untrusted TIFF input in their supported execution paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46599"
},
{
"category": "external",
"summary": "RHBZ#2483473",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483473"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46599"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46599",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46599"
},
{
"category": "external",
"summary": "https://go.dev/cl/759960",
"url": "https://go.dev/cl/759960"
},
{
"category": "external",
"summary": "https://go.dev/issue/79577",
"url": "https://go.dev/issue/79577"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/uhYX90BlBvI",
"url": "https://groups.google.com/g/golang-announce/c/uhYX90BlBvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5032",
"url": "https://pkg.go.dev/vuln/GO-2026-5032"
}
],
"release_date": "2026-05-29T19:35:33.539000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/image version 0.41.0 or later, which limits the amount of compressed data the decoder will process. As a workaround, restrict accepted image formats at the application edge and reject TIFF input where it is not a required format. Applications that do not decode untrusted TIFF images are not affected.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data"
},
{
"cve": "CVE-2026-46625",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-10T22:01:17.685570+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie\u0027s attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46625"
},
{
"category": "external",
"summary": "RHBZ#2487740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020",
"url": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7",
"url": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j",
"url": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j"
}
],
"release_date": "2026-06-10T21:18:05.372000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution"
},
{
"cve": "CVE-2026-47691",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T16:02:45.855856+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488439"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Netty\u0027s DNS resolution component, `netty-resolver-dns`, allows for DNS cache poisoning. An attacker with control over an authoritative name server for a subdomain could exploit this vulnerability to inject malicious DNS records into the cache of parent domains. This could lead to redirection of network traffic, impacting the integrity and availability of services relying on DNS resolution within affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47691"
},
{
"category": "external",
"summary": "RHBZ#2488439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47691",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85",
"url": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85"
}
],
"release_date": "2026-06-12T14:33:16.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records"
},
{
"cve": "CVE-2026-48043",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-06-12T16:02:56.371830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488442"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in netty-codec-http2, affecting Red Hat products that utilize HTTP/2 communication with decompression. A remote attacker can exploit a resource leak in the `DelegatingDecompressorFrameListener` by sending malformed HTTP/2 frames, potentially leading to an Out Of Memory Error and causing the Java Virtual Machine to terminate. This could disrupt service availability in affected deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48043"
},
{
"category": "external",
"summary": "RHBZ#2488442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488442"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48043"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j",
"url": "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j"
}
],
"release_date": "2026-06-12T14:39:52.498000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak"
},
{
"cve": "CVE-2026-48059",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-06-12T16:02:40.032749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Netty HAProxy PROXY protocol v2 codec, which can lead to a denial of service. A remote attacker can trigger a memory leak by sending a specially crafted HAProxy PROXY protocol v2 header with deeply nested SSL TLV records, causing resource exhaustion in affected Red Hat products that utilize this codec.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48059"
},
{
"category": "external",
"summary": "RHBZ#2488437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48059"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j",
"url": "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j"
}
],
"release_date": "2026-06-12T14:42:44.677000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
},
{
"cve": "CVE-2026-50010",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-06-12T16:02:13.735675+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488429"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Netty that affects Red Hat products utilizing the `netty-handler` component, including various Red Hat AMQ, Enterprise Application Platform, and OpenShift offerings. The vulnerability arises when a Netty client is configured with a plain X.509 Trust Manager, leading to a bypass of hostname verification. This oversight allows a remote attacker to perform man-in-the-middle attacks by impersonating a legitimate server, potentially compromising sensitive data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50010"
},
{
"category": "external",
"summary": "RHBZ#2488429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50010"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9",
"url": "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9"
}
],
"release_date": "2026-06-12T14:50:43.151000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass"
},
{
"cve": "CVE-2026-50559",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-09T10:55:32.426000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486959"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Quarkus. A remote attacker could bypass HTTP path-based authorization policies by using specially crafted encoded semicolons, slashes, or backslashes in HTTP requests. This could allow unauthorized access to protected static resources, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Quarkus where HTTP path-based authorization policies can be bypassed by a remote attacker. Specially crafted HTTP requests containing encoded semicolons, slashes, or backslashes can circumvent security controls, allowing unauthorized access to protected static resources and leading to information disclosure. This is critical in deployments where Quarkus applications serve sensitive static content and rely solely on path-based authorization.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50559"
},
{
"category": "external",
"summary": "RHBZ#2486959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50559",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50559"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50559",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50559"
},
{
"category": "external",
"summary": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-qcxp-gm7m-4j5v",
"url": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-qcxp-gm7m-4j5v"
}
],
"release_date": "2026-06-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters"
},
{
"cve": "CVE-2026-54512",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-06-23T22:01:49.821346+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492015"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `jackson-databind` is rated as Important. While it describes a potential bypass of the PolymorphicTypeValidator leading to arbitrary code execution, exploitation requires an attacker to already possess administrative privileges, specifically the `manage-realm` role. This flaw does not enable privilege escalation, as it does not grant additional capabilities beyond those inherently available to an existing administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54512"
},
{
"category": "external",
"summary": "RHBZ#2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5",
"url": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5988",
"url": "https://github.com/FasterXML/jackson-databind/issues/5988"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"
}
],
"release_date": "2026-06-23T20:56:36.646000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass"
},
{
"cve": "CVE-2026-54513",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2026-06-23T22:01:34.437620+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492010"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `jackson-databind` allows for a security bypass, enabling arbitrary code execution. The vulnerability arises from insufficient validation of array component types by `BasicPolymorphicTypeValidator`, which permits deserialization of unallowlisted types when processing untrusted input. This bypass of type validation can lead to a complete system compromise, affecting confidentiality, integrity, and availability in Red Hat products utilizing `jackson-databind` for data processing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54513"
},
{
"category": "external",
"summary": "RHBZ#2492010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492010"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54513"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5",
"url": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e",
"url": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5981",
"url": "https://github.com/FasterXML/jackson-databind/issues/5981"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5983",
"url": "https://github.com/FasterXML/jackson-databind/issues/5983"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/pull/5984",
"url": "https://github.com/FasterXML/jackson-databind/pull/5984"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f"
}
],
"release_date": "2026-06-23T20:53:52.543000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Upgrade to version 2.18.8, 2.21.4, or 3.1.4 or later to address this vulnerability. If upgrading is not immediately possible, remove BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() from the application\u2019s ObjectMapper configuration to eliminate the affected deserialization path. Rebuild and restart the application to apply the configuration change.\n\nAs an additional mitigation, disable polymorphic deserialization of untrusted data where possible by avoiding or removing default typing features such as activateDefaultTyping() or enableDefaultTyping(). When polymorphic deserialization is required, restrict allowed subtypes using a strict whitelist of trusted application packages and avoid broad or permissive type validation rules.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution"
}
]
}
ubuntu-cve-2026-48779
Vulnerability from osv_ubuntu
Published
2026-06-17 13:20
Modified
2026-06-30 16:22
Summary
Details
ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.
Severity
7.5 (High)
7.5 (High)
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ws",
"binary_version": "1.0.1+ds1.e6ddaae4-1"
}
]
},
"package": {
"ecosystem": "Ubuntu:16.04:LTS",
"name": "node-ws",
"purl": "pkg:deb/ubuntu/node-ws@1.0.1+ds1.e6ddaae4-1?arch=source\u0026distro=xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.7.2+ds1.349b7460-1",
"1.0.1+ds1.e6ddaae4-1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ws",
"binary_version": "1.1.0+ds1.e6ddaae4-3ubuntu1"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "node-ws",
"purl": "pkg:deb/ubuntu/node-ws@1.1.0+ds1.e6ddaae4-3ubuntu1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.1.0+ds1.e6ddaae4-3build1",
"1.1.0+ds1.e6ddaae4-3ubuntu1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ws",
"binary_version": "7.2.1-3"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "node-ws",
"purl": "pkg:deb/ubuntu/node-ws@7.2.1-3?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.1.0+ds1.e6ddaae4-5",
"7.2.1-2",
"7.2.1-3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ws",
"binary_version": "8.5.0+~cs13.3.3-2"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "node-ws",
"purl": "pkg:deb/ubuntu/node-ws@8.5.0+~cs13.3.3-2?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.4.2+~cs18.0.8-2",
"7.5.5+~cs13.0.13-1",
"8.5.0+~cs13.3.3-2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ws",
"binary_version": "8.11.0+~cs13.7.3-2"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "node-ws",
"purl": "pkg:deb/ubuntu/node-ws@8.11.0+~cs13.7.3-2?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.11.0+~cs13.7.3-1",
"8.11.0+~cs13.7.3-2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ws",
"binary_version": "8.18.1+~cs14.18.2-1"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "node-ws",
"purl": "pkg:deb/ubuntu/node-ws@8.18.1+~cs14.18.2-1?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.18.0+~cs14.5.15-1",
"8.18.1+~cs14.18.2-1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "node-ws",
"binary_version": "8.19.0+~cs14.19.1-1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "node-ws",
"purl": "pkg:deb/ubuntu/node-ws@8.19.0+~cs14.19.1-1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.18.1+~cs14.18.2-1",
"8.19.0+~cs14.19.1-1"
]
}
],
"aliases": [],
"details": "ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.",
"id": "UBUNTU-CVE-2026-48779",
"modified": "2026-06-30T16:22:53Z",
"published": "2026-06-17T13:20:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-48779"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"type": "REPORT",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-48779"
]
}
WID-SEC-W-2026-2460
Vulnerability from csaf_certbund - Published: 2026-07-21 22:00 - Updated: 2026-08-04 22:00Summary
Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Bamboo ist ein Werkzeug zur kontinuierlichen Integration und Bereitstellung, das automatisierte Builds, Tests und Freigaben in einem einzigen Arbeitsablauf verbindet.
Bitbucket ist ein Git-Server zur Sourcecode-Versionskontrolle.
Confluence ist eine kommerzielle Wiki-Software.
Fisheye ist ein Quellcode-Repository-Browser für Unternehmensteams.
Crucible ist eine Code-Review-Lösung für Unternehmensteams.
Jira ist eine Webanwendung zur Softwareentwicklung.
Angriff: Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
Betroffene Betriebssysteme: - Sonstiges
- UNIX
- Windows
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
References
15 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Bamboo ist ein Werkzeug zur kontinuierlichen Integration und Bereitstellung, das automatisierte Builds, Tests und Freigaben in einem einzigen Arbeitsablauf verbindet.\r\nBitbucket ist ein Git-Server zur Sourcecode-Versionskontrolle.\r\nConfluence ist eine kommerzielle Wiki-Software.\r\nFisheye ist ein Quellcode-Repository-Browser f\u00fcr Unternehmensteams. \r\nCrucible ist eine Code-Review-L\u00f6sung f\u00fcr Unternehmensteams.\r\nJira ist eine Webanwendung zur Softwareentwicklung.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management ausnutzen, um beliebigen Code auszuf\u00fchren, erweiterte Berechtigungen zu erlangen, Sicherheitsma\u00dfnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszul\u00f6sen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-2460 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2460.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-2460 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2460"
},
{
"category": "external",
"summary": "Atlassian Security Bulletin Juli vom 2026-07-21",
"url": "https://confluence.atlassian.com/security/security-bulletin-july-21-2026-1821999345.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:46903 vom 2026-07-27",
"url": "https://access.redhat.com/errata/RHSA-2026:46903"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:46885 vom 2026-07-27",
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-21286 vom 2026-07-28",
"url": "http://linux.oracle.com/errata/ELSA-2026-21286.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:47388 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:47451 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:47451"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:44267 vom 2026-07-28",
"url": "https://access.redhat.com/errata/RHSA-2026:44267"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:44263 vom 2026-07-28",
"url": "https://access.redhat.com/errata/RHSA-2026:44263"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:48126 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:48126"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:48124 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:48124"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:48151 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:50300 vom 2026-08-04",
"url": "https://access.redhat.com/errata/RHSA-2026:50300"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:48693 vom 2026-08-04",
"url": "https://access.redhat.com/errata/RHSA-2026:48693"
}
],
"source_lang": "en-US",
"title": "Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-08-04T22:00:00.000+00:00",
"generator": {
"date": "2026-08-05T09:03:30.967+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-2460",
"initial_release_date": "2026-07-21T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-07-21T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-07-27T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-07-28T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-07-29T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-08-04T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "5"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "LTS \u003c12.1.9",
"product": {
"name": "Atlassian Bamboo LTS \u003c12.1.9",
"product_id": "T057014"
}
},
{
"category": "product_version",
"name": "LTS 12.1.9",
"product": {
"name": "Atlassian Bamboo LTS 12.1.9",
"product_id": "T057014-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bamboo:lts__12.1.9"
}
}
},
{
"category": "product_version_range",
"name": "LTS \u003c10.2.21",
"product": {
"name": "Atlassian Bamboo LTS \u003c10.2.21",
"product_id": "T057016"
}
},
{
"category": "product_version",
"name": "LTS 10.2.21",
"product": {
"name": "Atlassian Bamboo LTS 10.2.21",
"product_id": "T057016-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bamboo:lts__10.2.21"
}
}
}
],
"category": "product_name",
"name": "Bamboo"
},
{
"branches": [
{
"category": "product_version_range",
"name": "LTS \u003c10.3.2",
"product": {
"name": "Atlassian Bitbucket LTS \u003c10.3.2",
"product_id": "T057017"
}
},
{
"category": "product_version",
"name": "LTS 10.3.2",
"product": {
"name": "Atlassian Bitbucket LTS 10.3.2",
"product_id": "T057017-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bitbucket:lts__10.3.2"
}
}
},
{
"category": "product_version_range",
"name": "LTS \u003c9.4.22",
"product": {
"name": "Atlassian Bitbucket LTS \u003c9.4.22",
"product_id": "T057018"
}
},
{
"category": "product_version",
"name": "LTS 9.4.22",
"product": {
"name": "Atlassian Bitbucket LTS 9.4.22",
"product_id": "T057018-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bitbucket:lts__9.4.22"
}
}
}
],
"category": "product_name",
"name": "Bitbucket"
},
{
"branches": [
{
"category": "product_version_range",
"name": "LTS \u003c10.2.14",
"product": {
"name": "Atlassian Confluence LTS \u003c10.2.14",
"product_id": "T057019"
}
},
{
"category": "product_version",
"name": "LTS 10.2.14",
"product": {
"name": "Atlassian Confluence LTS 10.2.14",
"product_id": "T057019-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:confluence:lts__10.2.14"
}
}
},
{
"category": "product_version_range",
"name": "LTS \u003c9.2.22",
"product": {
"name": "Atlassian Confluence LTS \u003c9.2.22",
"product_id": "T057020"
}
},
{
"category": "product_version",
"name": "LTS 9.2.22",
"product": {
"name": "Atlassian Confluence LTS 9.2.22",
"product_id": "T057020-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:confluence:lts__9.2.22"
}
}
}
],
"category": "product_name",
"name": "Confluence"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.9.12",
"product": {
"name": "Atlassian Crucible \u003c4.9.12",
"product_id": "T057022"
}
},
{
"category": "product_version",
"name": "4.9.12",
"product": {
"name": "Atlassian Crucible 4.9.12",
"product_id": "T057022-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:crucible:4.9.12"
}
}
}
],
"category": "product_name",
"name": "Crucible"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.9.12",
"product": {
"name": "Atlassian Fisheye \u003c4.9.12",
"product_id": "T057021"
}
},
{
"category": "product_version",
"name": "4.9.12",
"product": {
"name": "Atlassian Fisheye 4.9.12",
"product_id": "T057021-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:fisheye:4.9.12"
}
}
}
],
"category": "product_name",
"name": "Fisheye"
},
{
"branches": [
{
"category": "product_version_range",
"name": "LTS \u003c11.3.8",
"product": {
"name": "Atlassian Jira LTS \u003c11.3.8",
"product_id": "T057023"
}
},
{
"category": "product_version",
"name": "LTS 11.3.8",
"product": {
"name": "Atlassian Jira LTS 11.3.8",
"product_id": "T057023-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:jira:lts__11.3.8"
}
}
},
{
"category": "product_version_range",
"name": "LTS \u003c10.3.23",
"product": {
"name": "Atlassian Jira LTS \u003c10.3.23",
"product_id": "T057024"
}
},
{
"category": "product_version",
"name": "LTS 10.3.23",
"product": {
"name": "Atlassian Jira LTS 10.3.23",
"product_id": "T057024-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:jira:lts__10.3.23"
}
}
}
],
"category": "product_name",
"name": "Jira"
}
],
"category": "vendor",
"name": "Atlassian"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T056236",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-10540",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2016-10540"
},
{
"cve": "CVE-2020-28282",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2020-28282"
},
{
"cve": "CVE-2020-7729",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2020-7729"
},
{
"cve": "CVE-2021-22569",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2021-22569"
},
{
"cve": "CVE-2021-23358",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2021-23358"
},
{
"cve": "CVE-2022-1537",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2022-1537"
},
{
"cve": "CVE-2022-3509",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2022-3509"
},
{
"cve": "CVE-2022-3510",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2022-3510"
},
{
"cve": "CVE-2022-37599",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2022-37599"
},
{
"cve": "CVE-2022-37601",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2022-37601"
},
{
"cve": "CVE-2022-37603",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2022-37603"
},
{
"cve": "CVE-2024-7254",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2024-7254"
},
{
"cve": "CVE-2025-11226",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2025-11226"
},
{
"cve": "CVE-2025-14813",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2025-14813"
},
{
"cve": "CVE-2025-62718",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2025-62718"
},
{
"cve": "CVE-2025-69873",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2025-69873"
},
{
"cve": "CVE-2026-12143",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-12143"
},
{
"cve": "CVE-2026-21575",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-21575"
},
{
"cve": "CVE-2026-21577",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-21577"
},
{
"cve": "CVE-2026-21579",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-21579"
},
{
"cve": "CVE-2026-22731",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-22731"
},
{
"cve": "CVE-2026-2332",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-2332"
},
{
"cve": "CVE-2026-27830",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-27830"
},
{
"cve": "CVE-2026-29063",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-29063"
},
{
"cve": "CVE-2026-29145",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-29145"
},
{
"cve": "CVE-2026-29146",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-29146"
},
{
"cve": "CVE-2026-31802",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-31802"
},
{
"cve": "CVE-2026-33671",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-33671"
},
{
"cve": "CVE-2026-33870",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-33870"
},
{
"cve": "CVE-2026-33871",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-33871"
},
{
"cve": "CVE-2026-34043",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-34043"
},
{
"cve": "CVE-2026-35554",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-35554"
},
{
"cve": "CVE-2026-40175",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-40175"
},
{
"cve": "CVE-2026-42033",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42033"
},
{
"cve": "CVE-2026-42035",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42035"
},
{
"cve": "CVE-2026-42041",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42041"
},
{
"cve": "CVE-2026-42043",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42043"
},
{
"cve": "CVE-2026-42044",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42044"
},
{
"cve": "CVE-2026-42198",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42198"
},
{
"cve": "CVE-2026-42264",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42264"
},
{
"cve": "CVE-2026-42581",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42581"
},
{
"cve": "CVE-2026-42583",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42583"
},
{
"cve": "CVE-2026-42585",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42585"
},
{
"cve": "CVE-2026-42587",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42587"
},
{
"cve": "CVE-2026-42588",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42588"
},
{
"cve": "CVE-2026-44249",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44249"
},
{
"cve": "CVE-2026-44486",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44486"
},
{
"cve": "CVE-2026-44487",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44487"
},
{
"cve": "CVE-2026-44488",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44488"
},
{
"cve": "CVE-2026-44490",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44490"
},
{
"cve": "CVE-2026-44492",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44492"
},
{
"cve": "CVE-2026-44494",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44494"
},
{
"cve": "CVE-2026-44495",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44495"
},
{
"cve": "CVE-2026-44496",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44496"
},
{
"cve": "CVE-2026-44705",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44705"
},
{
"cve": "CVE-2026-45416",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-45416"
},
{
"cve": "CVE-2026-45505",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-45505"
},
{
"cve": "CVE-2026-45736",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-45736"
},
{
"cve": "CVE-2026-46625",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-46625"
},
{
"cve": "CVE-2026-47838",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-47838"
},
{
"cve": "CVE-2026-4800",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-4800"
},
{
"cve": "CVE-2026-48043",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-48043"
},
{
"cve": "CVE-2026-48779",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-48779"
},
{
"cve": "CVE-2026-50010",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-50010"
},
{
"cve": "CVE-2026-5598",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-5598"
},
{
"cve": "CVE-2026-6321",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-6321"
},
{
"cve": "CVE-2026-6322",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-6322"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…